Extracted

• • Target

    aaedd449b4ce5b8e2fc833c25d827df2622fde78472add9d9c21d9ee4b5e8db2

  • Size

    389KB

  • MD5

    4069af214d80a18e083d1c14931b9fe4

  • SHA1

    35bd2fbb9c5490c15ca1c8e6de7652ab02d2bec8

  • SHA256

    aaedd449b4ce5b8e2fc833c25d827df2622fde78472add9d9c21d9ee4b5e8db2

  • SHA512

    963220f8221e74ce7830f53f37ee4f5da11d0272da178c01bc954d15e69e08bf728cb82042fcbcb518f59e14790058cf321b774f06435391d92e12e25e424f11

  • SSDEEP

    6144:K4y+bnr+Np0yN90QEZ11bMbz8xspx+FDDhMyNJSoyX6J/fdye3NH:cMr1y90TbLxsD+FhrNY6FMe3NH

  Score

  10^/10

  healerredlineromadropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1