Extracted

• • Target

    06cb7fbccba4c806d4e118d0f28a577ef77e6631791aca0d1a0dfe1bfec21baf

  • Size

    659KB

  • MD5

    45eec1cfeeaf8c567e38a030799ea373

  • SHA1

    1a895e55725a67e992738481dcc61a10b3e22de2

  • SHA256

    06cb7fbccba4c806d4e118d0f28a577ef77e6631791aca0d1a0dfe1bfec21baf

  • SHA512

    eebb5abd8904280b39ef40a7291f4d49bafebea0a14123fa8810643b41fd4b318deb3280d145bf31b6f1d7f20bb86a2cddf08e4058b4fd54ee54a098c51f239d

  • SSDEEP

    12288:eMrgy90GZML5dA1JCmn9ftzrt2Z2tXLlWK3LKYJo4x2Z644rzWK8r8vh1XxWu:iyLydA1JCmNtft20NbK+YZ74WK1Wu

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1