Extracted

• • Target

    1d681f61b8ffa0cb9907525685e3a815505fc6f955c22581ace0cf764180abe4

  • Size

    522KB

  • MD5

    5c9d07bfdb939291b65bb480fa22d3d6

  • SHA1

    773951d42b071c62d61be5fdfc01793a494a9c1a

  • SHA256

    1d681f61b8ffa0cb9907525685e3a815505fc6f955c22581ace0cf764180abe4

  • SHA512

    2b796041d2f7a57ca1054179de5ce43f71eaf0e4365be40e783ab844714317484306306abef8cb3735929a8bf16bd586f5213961fb457bae6258d1dfdb615ef2

  • SSDEEP

    6144:KCy+bnr+7p0yN90QEF5wU3jZqAxrOXepEil9F0yURpfObhlGiIWtStio5wN6mogg:uMr7y90fjZoCzM4brst6QN0PaPgZe

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1