Extracted

• • Target

    4610f97029e61acd0379db0718cdaa0ea5f26142232eed20a3284f5047a25cdd

  • Size

    536KB

  • MD5

    5b8360c92144207ecaeffc4612069c96

  • SHA1

    49e5c3ee8d3934c01eb755643cdf419ede79611f

  • SHA256

    4610f97029e61acd0379db0718cdaa0ea5f26142232eed20a3284f5047a25cdd

  • SHA512

    e186525d39df42ba0c06d58d58777d0c67876ff601a2d2792484437c94ca303bee1bd63f69b7122738712906fc0fa2412e750f7a39216d6c4375680e2f40f0b4

  • SSDEEP

    12288:pMray904+TJ97N2yajfH05TXEJ9PJ3RRWTXwSD0WkL:zyON1ajc5TUJNZRUXbDj2

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1