Extracted

• • Target

    89bafa3ab3e46c3cd892d45969d0cf489fb61391ffaca45700d289764a10b504

  • Size

    531KB

  • MD5

    bffe70b3ecf5c24cd2ec0c91ecab3422

  • SHA1

    3a6aab8d98f9c191bf1d2fe5ae6208eac220a9b8

  • SHA256

    89bafa3ab3e46c3cd892d45969d0cf489fb61391ffaca45700d289764a10b504

  • SHA512

    32521a4d68ca09b4f5ac0ffedb3abd28240245c4f4f61b0b91793f7939d7ae9b7cb99ef223a918d0542896b9c22934888346f9495dd31fa9aa6e2ebe1f21de5d

  • SSDEEP

    12288:dMr2y90TcB7r9SzPntpRA87yOt3Vu3BzDGtzrjGQaqBPEkjGmB3HATpwEDR:fyYi7xGjvPfuxqHSQpZTFHATpvd

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1