Extracted

• • Target

    8155fc4671b153e422910b26c71398b7239a16b09062de8fdfde62d53d6183dc

  • Size

    674KB

  • MD5

    ec4108aac341b0aa0c1cdc2234f4e40d

  • SHA1

    f47e910489a8695969fffa4592659b8c6111bc12

  • SHA256

    8155fc4671b153e422910b26c71398b7239a16b09062de8fdfde62d53d6183dc

  • SHA512

    4dfc135da4a5aa95cc6b4fc17abc32ca70a2f1fa69e47c69ad18ece059b015fb3220e935ea559f983efaa7a49961dfc7c8523d3d5c0c22cf39e801ff8c98ca84

  • SSDEEP

    12288:6MrJy90zYJXE1+K5o+mKo6gGK7v69kp8CqdQo3xI8uHuXP42XAGk8gRIr1:Xyhg+p+mKo6czHcbe242XAG3Vr1

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1