Extracted

• • Target

    ade0009d3fb11b630bc424c19992aeab60cb24c950101cb940d86048348b676d

  • Size

    1.1MB

  • MD5

    483ab27c253a37f3d6d42da6086254d0

  • SHA1

    b3f0616928364bb2e93e6739cb4609c1abea417f

  • SHA256

    ade0009d3fb11b630bc424c19992aeab60cb24c950101cb940d86048348b676d

  • SHA512

    dab741a0fd707567638a55e7c684e184b5be7ead174f406ade791c37286f8fd7d0545831578821a26250aa338ee8e6aa330404a433d0190b8c699e0a23e7003b

  • SSDEEP

    24576:CysCgJE8l7vcFkghpBWl4nOfzVxy6yioseibOs:pHZI7vcFkgoeEVID3CO

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1