Extracted

• • Target

    eab5ebc157032ac3357da96b04a989fb4d0da91d10896289955e92f6a024f5c3.exe

  • Size

    488KB

  • MD5

    71dccbbf901a68b85def5e6d4c737241

  • SHA1

    bdacb665bae8364bf7201c87d4c13cb445f64f35

  • SHA256

    eab5ebc157032ac3357da96b04a989fb4d0da91d10896289955e92f6a024f5c3

  • SHA512

    cfb5fd3b12f2bf2467ab3f4b68fd68dd70eb87637ce52748d9cfc5108f3ac97738e7f854a737991057876603dfe64254b6a0beea774622f1a87b269c40389509

  • SSDEEP

    12288:xMr2y90wmDyJBgY6Ge7mCbiefrIXagRtINu+oBhE/FQ+PR3:LyNUOimCble+u+ow9HR3

  Score

  10^/10

  redlineduburdiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1