Extracted

• • Target

    3c5a4fa5efe2852729ce8ae85af06c19f907208a0e100ce1ee5f8f85c90196ce

  • Size

    530KB

  • MD5

    b7d355bcc3831c252ef8c730d31e0534

  • SHA1

    ba22c5ea25aee25023cc3517b0db997df0aeacfe

  • SHA256

    3c5a4fa5efe2852729ce8ae85af06c19f907208a0e100ce1ee5f8f85c90196ce

  • SHA512

    fb0e5b6631681700b1131de47468df81b52507a8be392c62df2efc8792e19bdf66bdc4a7f21a57732b9223a32bb90491bcdeae55bc054cc17a7c35fe45b6417a

  • SSDEEP

    12288:mMryy90YXlI5N5vVsfsfBE4juJZ2RIXGlEEM8nz:EyY5PVTE2uJZ2RiG2EMw

  Score

  10^/10

  healerredlinefuddiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1