Extracted

• • Target

    ad7ad47e3ef2176b4f11b9580d5f94a60a6c60aa234a086c027076f615bd9c07

  • Size

    660KB

  • MD5

    584809ae0cc9465ea87ef83c210cc599

  • SHA1

    adcb10f82d095eb2d910499d2de2a80554e94d85

  • SHA256

    ad7ad47e3ef2176b4f11b9580d5f94a60a6c60aa234a086c027076f615bd9c07

  • SHA512

    64400867bb65f40b5092bea9f50432be9718174258028c2e8ae2acf491a489d347e2ca39964b1f3ad98823859d7753e1ec84b8acdc859d427ba774554ef0093b

  • SSDEEP

    12288:xMr2y90pL1m4Qhnvv2ecjb7x6ThuIPZA5nCkt+BjGf5K+a/smI7nJh9CbfE:3y81xw32fpwuIC5Ckt+BCA8mILJfCbfE

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1