Extracted

• • Target

    5ac62561591719f759a0e6591aba88231b44ef47d9a6143ad2f4b424f1969ae0

  • Size

    670KB

  • MD5

    bc3f4b7ce3f952177c05c54ffcef2568

  • SHA1

    9a3d9a88ce8a3bcc3a86f6b303a99aec25b7be96

  • SHA256

    5ac62561591719f759a0e6591aba88231b44ef47d9a6143ad2f4b424f1969ae0

  • SHA512

    564511f11e580367e6f9d35fe8159736652c3b72b2a5ec777aed390c8ccdae435bc2d7b99208fa56dc8f3a8ef5d7e006fdd7797e85d768a965886f5a3fb40ebe

  • SSDEEP

    12288:gMruy90OE/yD1ALhd4n8wMFNBUaj09TK7jXh6swEoeqgxcpQz9n3D6QBVS:+ytKLhKnPMF/Uxgh6MTqfpQxnGQy

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1