Extracted

• • Target

    3d5dc20d9f5c337075be0de4d33d47c6886c76ee1fe24a7369905b354bc66bf3

  • Size

    817KB

  • MD5

    20edbc3594c2d0e1bf386c99d70117ac

  • SHA1

    7d1461a78668240b989b54c4f145c14bcb02a49a

  • SHA256

    3d5dc20d9f5c337075be0de4d33d47c6886c76ee1fe24a7369905b354bc66bf3

  • SHA512

    9b068bfb6d6f8b9bec0b70936453f9fc1b442cdb84645a36b3540aea7171848966cdadb5cf407c97318c1ebde522cc7851fecc95b4048e04d7d3a7cab3d0609f

  • SSDEEP

    24576:7ynXWJCXZUruwAFY78cg07f391YBECAPhmP5v:uXWJCpYsu8cVf3Dm1GoP5

  Score

  10^/10

  healerredlinedubkadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1