Extracted

• • Target

    db3ca5ece5fbdcad7e55518c8da8dd1bb5cc3802209fe2b19af3aa6fc2ba055d

  • Size

    524KB

  • MD5

    23d2e72c3f9607598a55a7a5a8c9dc87

  • SHA1

    d7e61a9b48b6d5ed38f008e8099992d167eb8e7e

  • SHA256

    db3ca5ece5fbdcad7e55518c8da8dd1bb5cc3802209fe2b19af3aa6fc2ba055d

  • SHA512

    468a5d4a237012613f33ea51b4f3335610de8ab5c059442525c1eefa49fac28e9e4a575c057e90582155f6fa7b0c04e5a3eafc0a9175e725659d108c985e4c9c

  • SSDEEP

    12288:6Mrty90XfypZG3Ruo8dXVP6qMQmWfQnOJg6T/OQ:Py+y7GBuoMP6qMQnWGx

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1