Extracted

• • Target

    c4949fc1182e7e46bd36686fbfe0bd123b9424591e3b67c046120dd154413d86

  • Size

    1.1MB

  • MD5

    4d6fdb88a47a4913b3adbd3bd6af2e87

  • SHA1

    503873036640ce4be13ecbd76025964faf3c80bd

  • SHA256

    c4949fc1182e7e46bd36686fbfe0bd123b9424591e3b67c046120dd154413d86

  • SHA512

    d251041c298573fb25ab19e1547c4dd5f995157b892d5373827acb18efd560431ad5e722f6f9630e34c88f8eed373349466a7c6c3a9effa9ca37082b5bf09b66

  • SSDEEP

    24576:vyp0joChH9GTselEZg9POiDVRRk4zWj8kP8t3iHr6+WlY:6pM5hUTdEZg9PVVRO4Sj8S8tSL6d

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1