Extracted

• • Target

    12dc564f6d5bd21314e04fcd2f1ff92eaa7bba39a182e518c2d2072a813b2053

  • Size

    700KB

  • MD5

    8b2f137f1551a81725a674b393b964e1

  • SHA1

    874e53dd80ae90faa1fceba3902428a9a2b9e586

  • SHA256

    12dc564f6d5bd21314e04fcd2f1ff92eaa7bba39a182e518c2d2072a813b2053

  • SHA512

    a7dbad05cceda2993331c9f061d3df455c3312e1f39d4069327e77d8a555c150f7970b87136ccdb518bda8ff26d2f15ae715897741b9d71662bbd2921c7d93ce

  • SSDEEP

    12288:+Mrjy90H7ngPY40tohBYt0WYk73S4jJ4QGoyUQ28LtpTv+qxc3:5yA794I7tik73Sm4QGjnT7b+ag

  Score

  10^/10

  healerredlinedubikdiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1