Extracted

• • Target

    1f06421e9cf8e05fc66230f3b3acd9f4ac3fdd3c3bad043d4713692da8ddd794

  • Size

    667KB

  • MD5

    9e25447945e0d1083cbbf4b538f28ad7

  • SHA1

    742a2b35edc8c73cfd899c3f14ab359d7011dfa3

  • SHA256

    1f06421e9cf8e05fc66230f3b3acd9f4ac3fdd3c3bad043d4713692da8ddd794

  • SHA512

    ad7b1d21a5fd852cc235bd8f01e7cc6f890a7641ca5a1276ba6cc4bc33c43e612fb37c141fc2d242e812d6d40a3566100ac59e112e6c72a52e446dbc6912f59e

  • SSDEEP

    12288:/Mrey901/y14o+oYDppnqS3KYOPTLFe3DhrUNQU/wtSjiVDsJK2:pyW/yGiYySrOPlwhrLiwtnVAK2

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1