Extracted

• • Target

    99ef893b0c73f2b7df685ef05d07ce24cec85871624fa4f4e0cfa842efd6fe9a

  • Size

    1.1MB

  • MD5

    357de6a1dfbb69b5eddeb32c1b38000b

  • SHA1

    0bc1e13df4a26aca58e01bd9338190135b09e881

  • SHA256

    99ef893b0c73f2b7df685ef05d07ce24cec85871624fa4f4e0cfa842efd6fe9a

  • SHA512

    fea53af844826fe57a0b87b8c19c3b59a785a8a544b057d4578349028c6a7c684b9778533811d092ac895ebf2343ef1cf284403526620186767741a224809122

  • SSDEEP

    24576:wySJILOP4DhcOHGEgg9L+Yco9KcgMjJ0Hbt4bX4Bv:3SJILZlcKGEgg9a4KcuHZ4bXY

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1