Extracted

• • Target

    f60c7a4488136ae8c5983d7671357aed3a5577f024656e6367d0178cc3436ee5

  • Size

    537KB

  • MD5

    9222cb2376969f1764d9f759ca3aceb8

  • SHA1

    41c6a72aa8f17b951c7f993adc8c3b9caea5e26f

  • SHA256

    f60c7a4488136ae8c5983d7671357aed3a5577f024656e6367d0178cc3436ee5

  • SHA512

    9e65db8ef529ff33120b6fb92c528e4e496d8ab83fc635eda5cce106b83ae7f32e753e08980306cabd60eecaf7956a31216bf0b81e594312e7d9b66ed52c4704

  • SSDEEP

    12288:wMriy90uhgAvTvrQIv9ZrU7oHlwTu+vK4inr/a:CynfvJ9ZrfFwTuUKxC

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1