Extracted

• • Target

    3370f5b80d6cf1a00eb1967e9952f4ceae4892fd1349ebc55fd00df81a79108f.exe

  • Size

    316KB

  • MD5

    8339677ffcc693f59e993f7889f24179

  • SHA1

    5d8c68db7e82bf7908af9f13a4fe9660cdb377f1

  • SHA256

    3370f5b80d6cf1a00eb1967e9952f4ceae4892fd1349ebc55fd00df81a79108f

  • SHA512

    09c2e7176c5e8137e6a2bb3b075353bc9d215eba02872eef5a28c90d8c94aa786c10e914e4a6b4c6ca4bed63f439121c4cb47ab378d5b8d1e4f4480730af4286

  • SSDEEP

    6144:Kdy+bnr+Op0yN90QE76vZrMgXGm9O5VaHJnQKJC0H6UznVCXvs+A:PMriy90xmNGHapQKJC0aUcfHA

  Score

  10^/10

  redlineduburdiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1