Extracted

• • Target

    f9e813df0973d30225cd20811f4a16307c2376058dd4b8a5842f84c107d0f867

  • Size

    682KB

  • MD5

    c762ca176956d9f465c97ec4dfef50f5

  • SHA1

    08416925697565fc9eddd74cb3210d81aa8b11b5

  • SHA256

    f9e813df0973d30225cd20811f4a16307c2376058dd4b8a5842f84c107d0f867

  • SHA512

    67d455d27685166d4cf63e70fae8b43bcdc911afeeced97c47fb5955f1b598d3965b4d11ceaa8eeefdbc03428dff712b36626f20e54d633e757b2f8bd0c21aa8

  • SSDEEP

    12288:tMrvy90WZF3Ul+xdmn6JWQUhxk3BNZDvILx/ZD6h0NMqeKI9xtUQ:yyj4+xLTUhxeW/e0NMqeKutUQ

  Score

  10^/10

  healerredlinesonydiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1