Extracted

• • Target

    fb39016d028464bf277db075198c210d4468caa8ea72a9fdff033790565dd2a8

  • Size

    673KB

  • MD5

    51e5e3596af59c7158466f9a86e0f2e6

  • SHA1

    33b1f014398128e2242ecb111386e5e82025ca4a

  • SHA256

    fb39016d028464bf277db075198c210d4468caa8ea72a9fdff033790565dd2a8

  • SHA512

    cb289f5fbb0da169f600139f820fa470dde296ba3a3bf39a84c24f74d51b2ab935c429c7d4c0a84bf80c083615d86ac48d29091c2734f9399154eb9689a7c4a9

  • SSDEEP

    12288:qMr6y90+NQ2ZB0LMM+/+ZmndxkKl8W9RjciJ+ofse2GTp872tJObSrWmKl+lBTqH:sysyDR/+ZmdxkLOFLEh7upibbzlBqw

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1