Extracted

• • Target

    a43b96295cd6c9cd460de57b4dc66b6db184d5f700e26ffb41ec6413e467d7c8

  • Size

    674KB

  • MD5

    0ec7d91f96a3eea4a9480a8fc4cb870b

  • SHA1

    9c9361b53cca0e385280a18ddff4260fb6557742

  • SHA256

    a43b96295cd6c9cd460de57b4dc66b6db184d5f700e26ffb41ec6413e467d7c8

  • SHA512

    5a6a8a1e36b6c08705627a157cac8f33f69cb07c53aa579f2e46e284544ed83f2e01388c4998b7c34f67f9deb872764975a4fa815aad0e64154423907a9ad4a5

  • SSDEEP

    12288:RMrLy90L7BM8BTe/eoG69RAG7WpSDQ4xYvuwuX+42vyVpBLiQ/a:OyY2eoG69RAGqksD342adhi

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1