Extracted

• • Target

    72488774a8a2375ac7a6302cb896031b7cc284d9fa4c0e677a46f96175eb78eb

  • Size

    559KB

  • MD5

    d2a6f56fadce015386099c28d0f1fea7

  • SHA1

    b080027387c696e1d5c79aee09a5a0dbc82236d9

  • SHA256

    72488774a8a2375ac7a6302cb896031b7cc284d9fa4c0e677a46f96175eb78eb

  • SHA512

    a3913dfa0767623b56c45ad79746c69799f73d41f7b0b717391427e8c01c09a687e56583c98255084c580e617380f40c0f60784ec47a47d9237e0ef6700539c3

  • SSDEEP

    12288:pMrMy90Dk09G3t//oQlxbcqKFB6aPR330ZQUHIgtzYC3tR:1yo81AixgqO6yliZoEbR

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1