Extracted

• • Target

    0df3b350b419160d759f577879e00417f1ca24198357d656883a1b88d1bc2a43

  • Size

    530KB

  • MD5

    a8725d27bf7b59a1ec0735209ff41f4b

  • SHA1

    0841c8aea28949a2a60d46efb125ac40b2965015

  • SHA256

    0df3b350b419160d759f577879e00417f1ca24198357d656883a1b88d1bc2a43

  • SHA512

    ddc6ed6bea17856eafb14f247fe2a934524fcd97540066c7577525ef6d985b1e4a7a01c4f275ecf0ebbd131ae5c69b1c149988f44dda20b54719f437d13fd733

  • SSDEEP

    12288:dMrky90n5a05+rd/0P9TpG111PV16jbfm:FygwR/0PdyvPV16jrm

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1