Extracted

• • Target

    c79446b6441127687018cfa4cfce9ee09614b45d2f4838dd4f76956a3b3885f0

  • Size

    658KB

  • MD5

    0470ad47d8b7f63fa40137fa95494245

  • SHA1

    cd89c06b9f57b1d04f264114e1b0ab7c2dcfe66e

  • SHA256

    c79446b6441127687018cfa4cfce9ee09614b45d2f4838dd4f76956a3b3885f0

  • SHA512

    08ddbb86347912731872fed7ba4313dcd8ecb4a98605a20f741226eda7fb0c8cce45c4d8a9b40726497b69b3f33608fe44aea39e6604e50f313b32b3ac1eb70a

  • SSDEEP

    12288:sMryy90Np6t/qnytaL+cJVnCBtaH9QkLRYjrzknZ/zGQnv44/zWKlw8v0LId3J:eyec4N3JCtUuRkZ/znw4KKcIf

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1