Extracted

• • Target

    6f374e5db059ef41b0d2fea389a481ace82bef74506aa6cabc168458d020a85e

  • Size

    533KB

  • MD5

    6a4f686cb7bb637dd30afa4258540dd5

  • SHA1

    343efdb7d5a2cca853d175c70eefee3f89f80114

  • SHA256

    6f374e5db059ef41b0d2fea389a481ace82bef74506aa6cabc168458d020a85e

  • SHA512

    d7d274011d55dd6da3ae0ce5e18f7a20e8dc7653efda0d692ebdffe9dff03851788ddd66cd2f671d6ea1411077585232ba31201c49be36ce4285dc7fcc23abbd

  • SSDEEP

    6144:Kry+bnr+Ip0yN90QEuXkvpx/YFQMKOfDu2v7+a22MgfP1oKYEzMi4HzfyrSXO5MD:5Mr4y90IMxu3LuSkWX1xYEgzG8O5RrM

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1