Extracted

• • Target

    f2ce42e91964146479b30ba1f486b0087f0cf65615a21a5a398a684d3a582a69

  • Size

    673KB

  • MD5

    db1912505bae040ceb28f3d8e69ce71c

  • SHA1

    5007ac54f41d528be62dbb8b6cbc4f0e0fa214d9

  • SHA256

    f2ce42e91964146479b30ba1f486b0087f0cf65615a21a5a398a684d3a582a69

  • SHA512

    461bffc6d01eebbfa5ff425416979a11177ace55558650babda2990f329f14a8cf000ef2f72758ada229f048b08955da430554dfaf3d8e79d73d58a77045b0da

  • SSDEEP

    12288:1Mrqy90VR5XkQgn969ZMku310EIbTu+h7b+4RTuW6uWo2Tv1EGHCvZ:LyapgOVuxK+4tu5LT1tY

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1