Extracted

• • Target

    8cdc2ffcd09389754d12e6748c8f23fc9c97306d56bbe425deab7ddb016c2fb6

  • Size

    561KB

  • MD5

    8bcc5a3531f885b7c4cd21afd5f12448

  • SHA1

    99196e16b9abf1143280cc95af57f1682abb6a6c

  • SHA256

    8cdc2ffcd09389754d12e6748c8f23fc9c97306d56bbe425deab7ddb016c2fb6

  • SHA512

    ac2421459334da14d5b4865f339f6dbfc3bbe075566d14c268f6274a8a63d350451df89e90eb8e3da289ed8989bf96b0f6912284d1d63f87bb035d178ba26216

  • SSDEEP

    12288:VMrEy90/BwWii2lVlYIjoAE/n2yZk9cAycMeAzxPBhBgrFC:xy2BdN2Lm/n3kStHoFC

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1