Extracted

• • Target

    a665079d19102cdabc8d5d362586e185b3fab19326f9098c9927060303392148

  • Size

    1.1MB

  • MD5

    70d5b537c75f3dfd512b59ba89b151ab

  • SHA1

    e8062bb29b8dd3505840997e1ec25ceeb5d59cc4

  • SHA256

    a665079d19102cdabc8d5d362586e185b3fab19326f9098c9927060303392148

  • SHA512

    6f467582668b29605d6309ab88b11657b2e04cf2df90b4f6ccba5f59d3a9ebb834e2ed520a30effe0c2b157304c60648be9b167e6f4a94c32d68a0aba1de3c71

  • SSDEEP

    24576:8yBcDOSDEXf4XvFk4qnOsqyOXkj6AIU7xtVQ2DdyM7jWno:riDODv4XvFk4oOrdU7/Vry

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1