Extracted

• • Target

    df09d7ff335d4a89b812adc1914e3095257d5ff3264a4112cdcd9f4226a48a1d

  • Size

    659KB

  • MD5

    4bf90f94a9d5b4fe7a22a872cb708301

  • SHA1

    8755c6b67a0bc0cc55e8439e604c4e8d1221c8c9

  • SHA256

    df09d7ff335d4a89b812adc1914e3095257d5ff3264a4112cdcd9f4226a48a1d

  • SHA512

    8d14e5590511154953d1e1a210365e4821a07ed4652560886e8d7c9d117e06288d63117800a2d38eae23212ec0db34a79afe3ba5abe45a8cd5edddf665c904ee

  • SSDEEP

    12288:fMrsy90cgM1CY7KE4w9be8lO8UcgVrEwdTt599rwJtQCzARft/ju0bEHMw:Py9xH4COzxBt5PutdzOBDbnw

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1