Extracted

• • Target

    0531066cc28b6b4389b0b4773a5a913b23384053f4447c27b7d8306f618961d6

  • Size

    678KB

  • MD5

    9d2773eb6cd48c7ba2e500fe5d2a717e

  • SHA1

    75544ea515e85f92fb3557de0a575af1c0aee15b

  • SHA256

    0531066cc28b6b4389b0b4773a5a913b23384053f4447c27b7d8306f618961d6

  • SHA512

    8b94ce55bbc1d2b95df67bd0e4d6bfdf686b429519cbb26edda1fcd75d2dc2b6bca43045be0b3db9e2286454e92afc1ec24d5e02db803334de84063a997cdf97

  • SSDEEP

    12288:lMrHy907xERSBRrNXjwMfEjPlrd06loTmtvP5VoidxqMxe33sctzKF:uy42Ryjzgo0oTmtvP5VoF33jC

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1