Extracted

• • Target

    abb4679b7673b3fc704f66f9d035b3e000988e5cffb458714d71e1422110be1a

  • Size

    824KB

  • MD5

    400cffd98f73df288e91270fa8514879

  • SHA1

    f4820a2ede6d1e0b26868d463868a1809a237eba

  • SHA256

    abb4679b7673b3fc704f66f9d035b3e000988e5cffb458714d71e1422110be1a

  • SHA512

    50632be8107ce869df3375b81971d2f07cdacbd985174abca980028c1001bb74b958d26edd3d6a9b129c51fa2e8ccc38f92f548a849bad927a7cff15bb177363

  • SSDEEP

    12288:UMrPy90OdCdv/KtfiElZmY/FAMtXKAC/msR+yJgrurL9WZ3mljMMNuONKI51SwEE:Ly8nO9AG6lcCgru3+e7uONKat

  Score

  10^/10

  healerredlinebobikdropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1