Extracted

• • Target

    a4c9834a0460d358fe6959e3e671d347483bc434273c5306962d63dd604dcb50

  • Size

    658KB

  • MD5

    b2ba3a6a58b97c10b907b7d5bad254f6

  • SHA1

    5c3f65806a601d753079f86ba6c503ced3c8d857

  • SHA256

    a4c9834a0460d358fe6959e3e671d347483bc434273c5306962d63dd604dcb50

  • SHA512

    9943e740c69d53311432bc7a90b3e0ddc3962508934bc9d0498fb8acdd24120138a46c31808a99cab69905f437b2f62ff2807d7b458594976fb2e008e6c2025a

  • SSDEEP

    12288:PMrcy90+SViQBwkBCUoaNNJUajC4hlHigm2YbklnwfoiowfEwAFXHfdwtggSdg:XyRSEewkRoanSCIAYbInMvnemt0q

  Score

  10^/10

  healerredlinerostodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1