Extracted

• • Target

    a7063d061b68b71986238c24f510d809c46c4f205bc7bb6253aaae8a686bffff

  • Size

    1.1MB

  • MD5

    1c59cf23f82fd63c5524bf0a934a1fc0

  • SHA1

    37b302adf3080d125b2d63079498a32ae192106e

  • SHA256

    a7063d061b68b71986238c24f510d809c46c4f205bc7bb6253aaae8a686bffff

  • SHA512

    06bbf10aa15d2378d1ae2356fa8458675996089d83fbf9c012b9dc5a4b1f21faee73045e6b6a24955beaae775b9c32d07b56f21c47890b52925725499b41f92a

  • SSDEEP

    24576:ly75506JpHgXFkVPQBOgxaAQdtS2S6CPcDl1RXIxzN:A75qK2XFk6Ogx7QnS2S6rbRo

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1