Extracted

• • Target

    bd335b666473085fadf9798ffc0213ef0256b53c3724b638b7e22469e769647b

  • Size

    690KB

  • MD5

    66e80b9603379e3849c68b62a660fc05

  • SHA1

    8978ae17f7f92fd1907734a97817c67a5f7baa11

  • SHA256

    bd335b666473085fadf9798ffc0213ef0256b53c3724b638b7e22469e769647b

  • SHA512

    c31c6af94eae083330ad5640c2870e80f492ce9bd9a66ecfb90d5a46607523fc170010184377198226cb653653d9f23556d03ad3d35e54de06b55cf985c434c5

  • SSDEEP

    12288:BMray90Apr7L08jySFFkYbLycIy/7hEUdPBWDIfeSDtIWgv2IKrPHyYB:vypprnjNicZEiPED5SDtev0+y

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1