Extracted

• • Target

    408adbe22d34af4e1b333100cc14188113fadc1c1da7575f3c900cbb88f76af9

  • Size

    673KB

  • MD5

    421db404d0fd62e433c09bcdf51671d4

  • SHA1

    50602d6891256dbfd68c5a05a2d0c6ebce0280f9

  • SHA256

    408adbe22d34af4e1b333100cc14188113fadc1c1da7575f3c900cbb88f76af9

  • SHA512

    33f4c90fb4251361a977df4e5e85e801bd1b69602adea72cb7a438a6e1263d27f0a652134fbcdf7f35f62b27e2a5c9913398af0ed653601fc54d7ba9d54b65a6

  • SSDEEP

    12288:2Mr+y90RP/4HAgdimCfI6mbc/nuProdJyomlU+Y/2aOpT:kyCnEvyCcWcdJyoUo4N

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1