Extracted

• • Target

    a4af34ff8dcc880c0d5868fa0384ca757321cec51d280fe6d377deb77c35278a

  • Size

    987KB

  • MD5

    50a05a56ffd77d6124d60435917e50c4

  • SHA1

    83976c8da4682f7f2a4d1cbf2a53382105785d37

  • SHA256

    a4af34ff8dcc880c0d5868fa0384ca757321cec51d280fe6d377deb77c35278a

  • SHA512

    fe77ad128870263ee48b108aecb60be52d770612a0e85eac3ce33daa77a6a44c7fb5b9b40d132d4536cc0d6e9bb6a1b86c85f364dd369ac877cecdecbb8eef21

  • SSDEEP

    24576:6yLAzUQHs19Vs6LrP3HBxZ8tZRzmM8bulsyx3v5+ENUYc:BU8S6LTBM7iM0ulh/

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1