Extracted

• • Target

    39d8f8122b85219577819f7aae00937ba0aa0e00b1043499b00b8a4bcd473d5c

  • Size

    659KB

  • MD5

    71ddae6bb077d949eca3155e7f246c72

  • SHA1

    6e1b1f8ee9bf73b7ad325c49f88c4f6fc2c630ec

  • SHA256

    39d8f8122b85219577819f7aae00937ba0aa0e00b1043499b00b8a4bcd473d5c

  • SHA512

    2157260ea48f5108233d014810e82d88d45b9efcd2705c492ace06b28fb00be2e6693b9cb8df8216c7733e972f143ba3c370af3afec28e88ee255dc845e0eb23

  • SSDEEP

    12288:gMrGy90aK78HadI33MAj0nXniW0QE2YZ09sWrLi0iJaWPt0:2yC4mu3MrnXn/0ZRZksW60iJ5t0

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1