Extracted

• • Target

    6a20e6a31bab0895881bc2ceef7d5883399e2f4aa6b3fd1aa56927e39acf6b89

  • Size

    1.1MB

  • MD5

    005e7f9debdf573a6fddad49c1311cf6

  • SHA1

    6779582ea1deca54999b84b9d0ad698598649f09

  • SHA256

    6a20e6a31bab0895881bc2ceef7d5883399e2f4aa6b3fd1aa56927e39acf6b89

  • SHA512

    d79da55cdd944c63477f469a444d8598688012236fc798750dc7f19a9667660ddcfc45eb334f377c437d39edbbb9a245c63ac78b4e360061a0c9bb6ef58d91f6

  • SSDEEP

    24576:yyGLjMu1b+0TFkYkDtEzCESAUPQLQ12u2d9T+r/6TbD:ZgjlTFkYkKCES14LK2rd06T

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1