Extracted

• • Target

    4902a7d405b1eff226d1f5218a24832566c2a4f4c090083c0c4c6053249a0e67

  • Size

    1.1MB

  • MD5

    78dd4fd9f777c7d43638b9ba85c28ae0

  • SHA1

    05d68d7ea7252bddb82e33b4a786498adcd83003

  • SHA256

    4902a7d405b1eff226d1f5218a24832566c2a4f4c090083c0c4c6053249a0e67

  • SHA512

    306aa61ef1d6818da3caa8acdf1f4320d00075013fe351884f12ec5a27341f49e190ac02aababd7b193817a1d12ae0cd3d266ad1b87c7c33498b3c2cfa09314f

  • SSDEEP

    24576:DyAtZjmakJ3MR716xZ0FkKdHCTd653wDHq8VhDhNlMXv8ngVGGw:WIZuJ3MR71U0FkRdDjZHlMfzo

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1