Extracted

• • Target

    c1cec3840500d60d554eb7ca045c79321c47ba47e4109d49a8215116c39e07fb

  • Size

    660KB

  • MD5

    fa0b27c89e82d2252bdb78ca09ec6528

  • SHA1

    2dd932bb822e49759d91f0348701e0e48f36b0e1

  • SHA256

    c1cec3840500d60d554eb7ca045c79321c47ba47e4109d49a8215116c39e07fb

  • SHA512

    d6be8bd9a770272402c114f9221811ac8c82b8f024199e19b7af421ae794b9199421b5ca654b5fb05c0124a2d3b0b68152c714e8d8822f768fe5a07f7b287aa8

  • SSDEEP

    12288:GMriy90dltTfl5ESzstivbRyL3PAWQ5JCX5JnD63K90fs3rLiiiraWPWBYNSE8Cr:wy4/ESOgyL3pQ5IVD669Gs36iir5vNT9

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1