Extracted

• • Target

    9b093029d88b2cf0ef3585e643a4e616d9b59bb8557cfbb72fbc83ba57e48c24

  • Size

    1.5MB

  • MD5

    47d241e28d7425af7214f892fdea3be9

  • SHA1

    f66b2c1a0c919ffb14cf0483b67636f9baefb16d

  • SHA256

    9b093029d88b2cf0ef3585e643a4e616d9b59bb8557cfbb72fbc83ba57e48c24

  • SHA512

    20cefdf5747a7e97d54d80db8e65ec3e103e7b21dede5cb64cc7fd95e9f2dfd30faadbb1a011aaa289a1b4d8c1e6f96a4ce8d0f1a474cf6a3bfa4068de148d8d

  • SSDEEP

    24576:8yyXvJ2JunFWNx+9XSm2KTJQ72oqrqezQLM+X9Wpx/r1CTdZAD4Ny034ZKZ5xJcK:r+vJ2knFEg9XPJQ72oCqO6X9Wv/rg7xb

  Score

  10^/10

  healerredlinemaskdiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1