Extracted

• • Target

    dc06ddacfa063c5a1e320168dfac770b50d2e51b9e9a100ba3b2bb50bf8bb370

  • Size

    656KB

  • MD5

    6cf1ce0bb3113c4b0d979d94979701a6

  • SHA1

    d025a0d56ee19414c63a26c129e61b6d79acdf7d

  • SHA256

    dc06ddacfa063c5a1e320168dfac770b50d2e51b9e9a100ba3b2bb50bf8bb370

  • SHA512

    ef14ca2a36e431dff8444654f593a1dd60e822f7dcd028f9ac04a7be5d0ea66a5e1f8fe948ac2ab32def6f4bc6a8955de14a8ddae338648ebf239cccb82863a5

  • SSDEEP

    12288:oMr4y90+DBrVqK5xUF5iZt/xbVrGcazqsbAOKLtogjoyoaah:gyFDBrVqK70ivKccAOKLra7

  Score

  10^/10

  healerredlinelintdiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1