Extracted

• • Target

    8b5ed7c4742ff19e11bb700273f786bca36fd2c0467fdf9b666e1becefa8fa42

  • Size

    1.2MB

  • MD5

    ea1c5001fbb6c153ff7d1596108d8679

  • SHA1

    220f9aa32e690f26b28e32e1fd5ee441c81525e8

  • SHA256

    8b5ed7c4742ff19e11bb700273f786bca36fd2c0467fdf9b666e1becefa8fa42

  • SHA512

    180574f47c41c70bcdd87ba10be9b0fd4398b7137b6d35649f950b28593e1b21f80668d9b30dfe5bb329d188bb55dc48e97f4f278280fd6bbd2dbb3d9580640d

  • SSDEEP

    24576:hyC/WdwwlyWZtNZRtlFqRlafUtsRBGtAXQseZ82cPV:UC/WdHlyWNZtFvfUtqUTv

  Score

  10^/10

  healerredlinerumfadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1