Extracted

• • Target

    75bcd48b8538cdc1f9673956d3a12290be4224bbc2b4d291e142a236c1609541

  • Size

    673KB

  • MD5

    0c45a4929a8d84327141bf792cfec07f

  • SHA1

    421f7630b27b4531399dc0bd6b48850a5effce5f

  • SHA256

    75bcd48b8538cdc1f9673956d3a12290be4224bbc2b4d291e142a236c1609541

  • SHA512

    e970c9a3e3a3308d31fa838252bc1878a717bb7701d36f5ec96b2c18c55814f48d4899fdce326705b583e406c472efa51bb1fb1643ddc7d745c876c1da5959b3

  • SSDEEP

    12288:XMrky90oOHOgx4QkXT5Ypq57YJndiV0BDDFDbuWadMoMpRuF:7yY4Z1557ynDFnuVbMOF

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1