Extracted

• • Target

    e60dec6d8d4f19fce840a81e122f627f044a34896e2f69ae779db4b7fb757cd7

  • Size

    389KB

  • MD5

    d0ceb0181a1e2a2ede0301b3141928f7

  • SHA1

    a57ff0352c9cdbcb451587ccdb6ae82176f89fdb

  • SHA256

    e60dec6d8d4f19fce840a81e122f627f044a34896e2f69ae779db4b7fb757cd7

  • SHA512

    811a8e6c409f42b98dbe3ea5774ee760c27e161774e66afcb080ef8af9b37b87a9205d6bbebba11cea88ed2ad3f2bb0e29176af860222dd7f03865226c4dfe43

  • SSDEEP

    6144:Kyy+bnr+1p0yN90QETbC0JVRiF12xit69QqHB4qEgrBwEbuxrFi19lB4y:GMrVy90LRo2kSQqHDEIwECC1BV

  Score

  10^/10

  healerredlinenasadropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1