Extracted

• • Target

    bea21f9cc9a10d291486630f6c3d9e4d9c7e926052ce0e8d3afa487f01523945

  • Size

    546KB

  • MD5

    74d76195825094715055224ce18d358b

  • SHA1

    9912c77f63dfe6bdde01c5aa9b1305b27aaf8910

  • SHA256

    bea21f9cc9a10d291486630f6c3d9e4d9c7e926052ce0e8d3afa487f01523945

  • SHA512

    c9583e167f6bb325446ac60dae9e7562f18887bff7858fee636c8e40f7537a13018c5fc5436a9bee774ab8eb37c0ef4fe3df24a0024c029183a7b45d647383d2

  • SSDEEP

    12288:sMrsy90lIRI3lethFqd4NisDKndYtRwLoi3RgnRv:QyMIRuch4KaWo9gnx

  Score

  10^/10

  healerredlinedowndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1