Extracted

• • Target

    7a51506822471b2f699afa9abb7d24300e051a17060e0953f92697c72351c688

  • Size

    389KB

  • MD5

    5f286d0fd40cd9646aeaee18e17a75d7

  • SHA1

    28c1a00a6428ddd44ec0eb952ec1e5b80b475768

  • SHA256

    7a51506822471b2f699afa9abb7d24300e051a17060e0953f92697c72351c688

  • SHA512

    09abb3a3d45d7b44db2cbb2994b0bb29ecc6ba1ffb74399c2de8a9d19423218342a0d0a8dcd2166c410c3541f2ecc7ab3775916ab25bcbcf81ce6eb020d1b97d

  • SSDEEP

    6144:Ksy+bnr+cp0yN90QEg/+X5WrF6eUhtjeXoOuwzpBEhbsgnlTuy5+Oy3mJ+4sqx:gMrky90+2XAGjeY/EpChwgn5+W2qx

  Score

  10^/10

  healerredlineromadropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1