Extracted

• • Target

    eaa40cfb88d082a0bb00c8cbbf46b6e60e3dd3f98ec9361555d9f47184ccc634

  • Size

    522KB

  • MD5

    80e50d4698070a556c732a619e22d570

  • SHA1

    888bb3c84fd15a825554673a2633693b627c85c6

  • SHA256

    eaa40cfb88d082a0bb00c8cbbf46b6e60e3dd3f98ec9361555d9f47184ccc634

  • SHA512

    7518c6fb9c993f6c36021ed5653a00159f90fd83c5ace2dacb36e4f51bde6cd68f6fbb33f61edc42c3bfd6b7c51daece0fb8370daf43ace7d608338df3ffcb81

  • SSDEEP

    12288:2MrVy90h3PQlR+7FpLVeYSjfYovc4u32OknGcrhO:jyQPQ3clRSp04u32OknGIhO

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1