Extracted

• • Target

    51525f7dee72a72882f70eda8e8b2d0a892b38a3253fd533397097686fecdcb9

  • Size

    346KB

  • MD5

    1cb0869e637173a124f98955c6700dd6

  • SHA1

    5d25dc0fd992a62b96edabfaeb6b06e26cc73298

  • SHA256

    51525f7dee72a72882f70eda8e8b2d0a892b38a3253fd533397097686fecdcb9

  • SHA512

    f9d26595a5615fde36348742e0768a7f4eb0e6c16fd7b17aeda1be5be0fb7a9a67aef5c123bbbba16a6465c25d1a1cb1ee88a6d7409290ec0b06d85f01e3c8aa

  • SSDEEP

    6144:Kqy+bnr+Ip0yN90QEHBHqHNezSycMgyYwfy8sOmmotqaO8hd6Va8lK:mMrwy909BHSTfMgvwkOdYhdYTlK

  Score

  10^/10

  healerredlinefumadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1