Extracted

• • Target

    b65c2dee8a921a678656bca6f44ec710e3439f80464a5ae3f448f9a65734f6bd

  • Size

    1.1MB

  • MD5

    11c750ffe9cfa158f7c5f2c104e2efcc

  • SHA1

    e807ffdc1af391ce8d587d5e613df3c0a96ef575

  • SHA256

    b65c2dee8a921a678656bca6f44ec710e3439f80464a5ae3f448f9a65734f6bd

  • SHA512

    8e0014e9a66b9c81f45481a76c228d7ba3aeafdd472c792423e77aa44333b0b29b8724750d7bc7abd67cdf9cc643434607bdff76cba51375c8a51a7cf10db35a

  • SSDEEP

    24576:wyzoqJL2jZQ8UFkllH7IgbzqiKxHOvNSuvrGd7c7l:31J6jZtUFkn7rzqimuI6SU

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1