Extracted

• • Target

    0ed9262d06bc389c81233543bd377c038c7aa5b3626cae439e6f3d9225f9483d

  • Size

    1.5MB

  • MD5

    0057d24fb397126fb1f15370ec1da35f

  • SHA1

    97a82b5bac9d2a8c4e7960297fb11e04c724e43d

  • SHA256

    0ed9262d06bc389c81233543bd377c038c7aa5b3626cae439e6f3d9225f9483d

  • SHA512

    a69649ac5d199d71c5f9fd8d3c6378df6aa5af1249afcebaeea72a45d6d41ff217df9d786beed48788ffb9609e6d9f41e04918410a174b4f854018ebe122624a

  • SSDEEP

    24576:tySllzVNEwZofP+D9UfTgIFYqiQUgCxJ6QiDAfq95gPRlnphg4Z:I4hXEdP+yiVgBDrTgTnphg4

  Score

  10^/10

  healerredlinemazdadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1