Extracted

• • Target

    b5809eef6113aed8d1ea58805175ec479c093cfa86d62107e30c544dcd0ae5ba

  • Size

    536KB

  • MD5

    1f72d5e71e0b4fac92ef6578b0f6b520

  • SHA1

    b6abcc8347780604dc1f84450c14e70a471c03a2

  • SHA256

    b5809eef6113aed8d1ea58805175ec479c093cfa86d62107e30c544dcd0ae5ba

  • SHA512

    cf7ac65ddc345f81a276dc35269341de5dc3a15d7a6e259fb797136aad52cdca1c479ad8ed5f90192ac3e4536d30f18cec0b1a2afef0c7b8a28c9602643d90e0

  • SSDEEP

    12288:LMr8y90eFp4Ei0tRt0+GLnT3EJ8+DR8aeZfBp:PyzFCx0tRt/GDT0J8aeZP

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1