Extracted

• • Target

    f6d58ed84dd9a7a5691be79b2dd832a7d21b160157318405652caa07efc9af0f

  • Size

    667KB

  • MD5

    5256465c8bf7f765342c546034234aa2

  • SHA1

    34c9034d5abe4e355d1eba32c0f01906f64818d8

  • SHA256

    f6d58ed84dd9a7a5691be79b2dd832a7d21b160157318405652caa07efc9af0f

  • SHA512

    6678de4722e9593b5d38e8eda47796c8b741bdcbbb966c3a5ed6fcf11aeef2fc6bbe1950342fa8aa34fa1709e0f407f6a5c0ea1a1c5dc855ea3c9e8c8c8e29c3

  • SSDEEP

    12288:vMr4y90dJpSfZeArjD8tmmn24cu1RyQrUJyT/wIk1XsrTFEH+:3yG2/3I5n2g1RDrZLwjSrTG+

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1