Extracted

• • Target

    36b7a62cdfe99a43ea18366cfa66b288a7677d03e111771acd67d65e8ff01001

  • Size

    1.1MB

  • MD5

    c0f84f4d52df81c0502a576ac95b6d19

  • SHA1

    14df9c77d9804be68e20801f3216fc113b443291

  • SHA256

    36b7a62cdfe99a43ea18366cfa66b288a7677d03e111771acd67d65e8ff01001

  • SHA512

    95d9950425df767cc5372bd18d827951c6d316575500f5c5386f6877eee48c247cf4e3f7d9bd787bc6acb3ee3220d22c3f2150325349cc7c5ed632c3970932cb

  • SSDEEP

    24576:CyamvbjU4WqQeFkGjTlIHRhN1sgsFSYbguqgz3azECVaL:pN/UTeFkYMhLsvbgcTazNV

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1