Extracted

• • Target

    323f7a4770f69f10dc5d8d78706957c627054d4f6797bbbaa4c71f167f0b6232

  • Size

    1.1MB

  • MD5

    c04a596029ee82fde6d82097ff08719e

  • SHA1

    006d787cfc68a1dab76062e9e8975d7a688c0196

  • SHA256

    323f7a4770f69f10dc5d8d78706957c627054d4f6797bbbaa4c71f167f0b6232

  • SHA512

    1cb1dc05954f38697816fefe9a4063d3c1d62a84a9d6cc70f1b0b0c9d00237395d51c2936db4d8524006af3a94adba3acaa30b59e69c44c34b496638180f3720

  • SSDEEP

    24576:gyxDgiC9HmUl+AaEEFW9OFkqfMx0z7bq/sl8/4eDwvwVJIWsQ5NqAv:nxDg/MUl+ABwW9OFkqfMSHCXtwvwM+N7

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1