Extracted

• • Target

    33dbfe2b8d29e7e62cb31922657d4a4e75bda8b17e3e58b7938153f4eb26917c

  • Size

    543KB

  • MD5

    b090b51b387c6c72e94aee626cb05faf

  • SHA1

    a44a68c921a038f8eb5d8eeefb0f3d2555478e67

  • SHA256

    33dbfe2b8d29e7e62cb31922657d4a4e75bda8b17e3e58b7938153f4eb26917c

  • SHA512

    d8997608b5513d697fc03cbc1df6d984fe393e7d17ceb05606a54605a92e0cf38be7c464aaac9700b11d2d48178c98679e32aa48aafed7617f58db08137f85d9

  • SSDEEP

    12288:UMrLy907a8x1oM5zkaAOUmfc3WKmIlsn/hTCZZhAunrorHFNT:HyCzeMNRjcGq+5ToZyusrlNT

  Score

  10^/10

  healerredlinerumfadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1