Extracted

• • Target

    848b4118e71968a14ebb6062e66a439f9731a3b801c7fce71398a6221c8ea83a

  • Size

    1.1MB

  • MD5

    7a35578ed06af38c4fe8a0608d7ce4d4

  • SHA1

    66cc7bde26c00df1d6f4764ec80e763d3d6071e3

  • SHA256

    848b4118e71968a14ebb6062e66a439f9731a3b801c7fce71398a6221c8ea83a

  • SHA512

    982576556dbb801c17e09ef9b50453a45075c7243a113f9f0ee28cf6533f63e418c8cb61568eb4c87bdfb06fb68f108fca0dda29ffc0fd7ff7769ccc1c6d4139

  • SSDEEP

    24576:kyruxxdwFyMxhUKhjwE1g9upCYl7xcXQdFQN6QXwfl:zruxxiyMxOKuE1g9urCQzmX

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1