Extracted

• • Target

    b0c91ae24279ff6e466a3d4c7535f03be8c2e2a7acb158dfe3384b817a6f3a0f

  • Size

    1.1MB

  • MD5

    c87a6863c7d0dbb0b757b862bce1d252

  • SHA1

    cc52ad1fd94a251beddb996f26144dd5e2aad51a

  • SHA256

    b0c91ae24279ff6e466a3d4c7535f03be8c2e2a7acb158dfe3384b817a6f3a0f

  • SHA512

    10c916f8122cd977bbff61041c716ec76e675519b00f550193eca3cad8843bcff1687d8061b177fe3f7fa888c1be8154536d5b5b8a9b8c4ab4246e14ab97b864

  • SSDEEP

    24576:8yQwYCKRigsiEOk0/aFkj27W+QCp0exEhmqeFh/jEsEqSI:rQwYAgsJ70/aFkappHEY/LEB

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1