Extracted

• • Target

    8d79ee7361be4b0ac22f65ef8e59d3f0b881853053a809c4de3170211bf9860a

  • Size

    688KB

  • MD5

    2b51bafa106eddfdf269d8a60dc4598a

  • SHA1

    fcd132e4e31827d050902791f9deca5107c1ea91

  • SHA256

    8d79ee7361be4b0ac22f65ef8e59d3f0b881853053a809c4de3170211bf9860a

  • SHA512

    1d0168c121fb676c9bcb23544ca66ada837eb079c45058ce5d758fa45e78cfd954ff56dde060183125085aba0f8e1e912f321096c7aed79dbfab975942629032

  • SSDEEP

    12288:RMrCy90MSCVxFAuOZnm/tOAbut/2eaLCLh2KcTQoOctBkYRXRM3n1lM+/tow6:jybVxCatOAbutupLwfkROctBkaS31lRw

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1