Extracted

• • Target

    b7a60b46cb00919b2498f57274abc36e2d5ca2c3acfca59f720a5ca41bd510ae

  • Size

    658KB

  • MD5

    a219bc4df317db3efba5ecb2f7506b1e

  • SHA1

    95912cba1d89b0e587f5fc4e5b16d7c3000a7050

  • SHA256

    b7a60b46cb00919b2498f57274abc36e2d5ca2c3acfca59f720a5ca41bd510ae

  • SHA512

    726226a572240ffc81beab7c433f0579ccc35172dee3ac9ca719b9c94dd43e02bddca8575ece0fb806a0e33a4241f0f0393c23293e55756b3f9413ecd04db1f1

  • SSDEEP

    12288:SMr0y905H0h3k026S3rkxtLbEmtwL+a8TypDbczhpLt8FyHdM344QzWKOr8vD0Z3:yy8UU02PsEmtwyaLuhphr9Mo4ZKO3h

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1