Extracted

• • Target

    576971eeedfa102e89d1fb13de44044a281472450cf1261aa56ef53b8ce843b1

  • Size

    522KB

  • MD5

    56e7512eba3f5597ec6135178e5b7827

  • SHA1

    a5ee9f740708f9479798fdaa30a62b4887215cb3

  • SHA256

    576971eeedfa102e89d1fb13de44044a281472450cf1261aa56ef53b8ce843b1

  • SHA512

    addfa30083f97bf440cd20b7576c8cbee75ae08dbf0f88008e05a1a63ffa487ee51ebe7f7b84fc77cdd9d4a5cdee8e0dd547bc661ed9acac2cc92bc44537056b

  • SSDEEP

    6144:Kky+bnr+Hp0yN90QEta9EMT2JWMFXGopR5QpKynPQOG5wsd4Egv5kt0ttzDdvWCP:MMrry90Pa9Eqmp0opDiKg/7tBKQILe

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1