Extracted

• • Target

    d091876f89ec9ac3e8ea89905e8233f952137289d8ec97d9d19cc608b61f01ac

  • Size

    1.0MB

  • MD5

    da37f484567f028fbee862951bbe7d8e

  • SHA1

    55a920f4348a864832135552930f32bd9b52f5b7

  • SHA256

    d091876f89ec9ac3e8ea89905e8233f952137289d8ec97d9d19cc608b61f01ac

  • SHA512

    ae4a097ec2e02229586e0ae7d87fee495443875ab419f0b2e88fa8ff17d0ce00f6453c44e2f52c8bd024f9f22f30dcbf6ba33c7e259d2b14d8c345228d5dbc6d

  • SSDEEP

    24576:my8XCBW1jXZTrhX2LdI3LHMwxVdrYtqpxGsNbqjjo:1gTrNoOM+dEgp7bqjj

  Score

  10^/10

  healerredlineronurdiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1