Extracted

• • Target

    7aca6e7d71d7a407263e478b92bd8a380cacebeb7d4e376f52ea5f090c10ae9a

  • Size

    673KB

  • MD5

    57b0b7a272f71bdfcd984943aea6e5a4

  • SHA1

    4a63ca0ff89c852d5a11984cf17ec71f3e6e45af

  • SHA256

    7aca6e7d71d7a407263e478b92bd8a380cacebeb7d4e376f52ea5f090c10ae9a

  • SHA512

    82cb2c2a6e14889428d8639e3cfc916773dd8bb06638d4d36a82f1621fa90da6c4970b6dd6e8f6b3a9ca37ab7d452d55776894fc0c78ad73e87f62b6a054b842

  • SSDEEP

    12288:qMrJy901Rfy5pCibZOvLKGmC+IrmxE278xY4omiV+YHZ36pXHtpUn+EWxu2:nyUQfJ9OvLvqE278G4o46ARHTU+1h

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1