Extracted

• • Target

    492c58b3acdbd182450e8e73d9930755e249d5444c454d93d9df5a51a479a7dd

  • Size

    389KB

  • MD5

    263658620fb98978b7e667ee19d6cf2e

  • SHA1

    f1fe5ece43cc3e59adb74643c290bd9f6797f2d1

  • SHA256

    492c58b3acdbd182450e8e73d9930755e249d5444c454d93d9df5a51a479a7dd

  • SHA512

    70c9dc33ff0f57f42d1df004b052cda4bf4412757dc0073d4357cd0b73c1758240996b7fce3be8b73da004e118c0bd0edb0a7851d90d1048c850a911b81d2f37

  • SSDEEP

    12288:FMrsy90/GlUScHa4KJLY8dAhiFbwe6jH:5yrUXiJLyiFbw/r

  Score

  10^/10

  healerredlinenasadropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1