Extracted

• • Target

    f41ed3cb39a2f7599514987f64e3bef155513975a427550d2945281f27b12e11

  • Size

    695KB

  • MD5

    f0041f0c47fcfcaff1a7a44d37fce285

  • SHA1

    7286caa9e648d7a44ad8928b353117d50ff308a6

  • SHA256

    f41ed3cb39a2f7599514987f64e3bef155513975a427550d2945281f27b12e11

  • SHA512

    a6a80019eca42ab04f6dbd29088da63e1e77244e876a2b29bb416fa38b7997752903a7349fa4c9081e128ee90c01420754e1e28a460078780e1c2182836cc1fe

  • SSDEEP

    12288:+Mr/y90+ZFA/6WN612cDLApKBMcyAvqQcp717O8QwR3jtVW0nhSeQs6XIVKeS7HS:ZyrFN1j/dBMcy21cvO8zpjtVWKhSeQsh

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1