Extracted

• • Target

    50df71774ab7540a9349f9a4340dbe8df484962fa47064bf3e515891c9836472

  • Size

    522KB

  • MD5

    27bbfbeeff222a8d5e0db44ababc8abf

  • SHA1

    366b0751e740af17506114c35eb4b2e506d05b78

  • SHA256

    50df71774ab7540a9349f9a4340dbe8df484962fa47064bf3e515891c9836472

  • SHA512

    28336dfc0c7b0bddd64c18e328d97351583f560db53da1765d397276ffa837d07add2d1acf5c8ef346011704898426599b1f423a1ab72d87a8351bba84491d94

  • SSDEEP

    12288:IMrXy90ZefnNzOrgGIXHo6qEqmHqICoGQX3I:/yyw0MZHo6qEqcqI/4

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1