Extracted

• • Target

    11608ca26b72774f66dc61909e2b201f38ea63b559b31a60e7ca2a82dceacfc0

  • Size

    672KB

  • MD5

    70a6b14e4c64e892a77b7bfb153cfb72

  • SHA1

    d0a693aaca5e02e57870934059d84a6bf192662e

  • SHA256

    11608ca26b72774f66dc61909e2b201f38ea63b559b31a60e7ca2a82dceacfc0

  • SHA512

    e3d2aee0ad986cd3067a1750eb721b1bbef02ad6469d9e915e2d94d69a2b12aa253bbd2f8d22c70281d01013d3debd4ba6d47620266eb40863e97ed5458c4ef6

  • SSDEEP

    12288:JMroy90FQYyZEvZKqF2B+iTUrIxVLewrm4djiyy0smzy9kcs1JqlzG:pyj/ZEvZKqdfrIxVxdmyy0smz0DqV

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1