Extracted

• • Target

    885ec892943043b5f7becbf95e29ca56c8751c1f716ee669d4efd41d9916b2de

  • Size

    534KB

  • MD5

    10a4b13a9791971ee6688560f96f4b99

  • SHA1

    7013ff13f94c94f5e8e5f65047ada57810d79e0a

  • SHA256

    885ec892943043b5f7becbf95e29ca56c8751c1f716ee669d4efd41d9916b2de

  • SHA512

    def927182989ec8165d4f7b034c271b7f80068dbf69fb045e1e49c6c23289685c6c63103c9b0a48e3f093f6c7196f01f3d4edcfbdb3e908aa185e116f211ef01

  • SSDEEP

    12288:0MrMy902erXB/X5SkfcczzIb4WNMq5K0s4oXAF:gyloRDzzA4kB40s4oM

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1