Extracted

• • Target

    09ac2a8ccd0e3bbe935e2b6819927dc89257041d1db3ee565eb98b869ed97cad

  • Size

    673KB

  • MD5

    817111ba05979ab9dd7ced975be4c9f8

  • SHA1

    af8cd68310a8a01c009564723c3987a1f51d8e0c

  • SHA256

    09ac2a8ccd0e3bbe935e2b6819927dc89257041d1db3ee565eb98b869ed97cad

  • SHA512

    9ba1d18987064a4ab81181e9db2b63b85fc39d60c5f5af6ea03060ed63faae30047b6fe210c4cc3f90a213d7b5ca59209924c82744cf5fa3c587766197e163d6

  • SSDEEP

    12288:LMrgy90Cj2Q6FCzgwJZoyxq8H74fWgJPyXiJ1A61GW/F8jB:7y76rFC57tzHY5JyqAup/2jB

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1