Extracted

• • Target

    96d4ea652f50043b77c3a5bda7095b5e64b11bfcaf95ddae4caa9736ac60aaeb

  • Size

    659KB

  • MD5

    dcac3c6101dc33173f14c1cb245f98e5

  • SHA1

    7e86994800dbb6ae97342c8fd4aa280cc43f846f

  • SHA256

    96d4ea652f50043b77c3a5bda7095b5e64b11bfcaf95ddae4caa9736ac60aaeb

  • SHA512

    36729c546bb2798b2b9ff7bfc1312f55db0de518617b4a5ffe8bbe3d34684b9577fd1800cfacc0da1395025f223cd7b6bfd167d5c05578910815880796ce43cd

  • SSDEEP

    12288:6MrKy90ivMzQ+nHojAk3jpsIWChEgSMDR7PX3OXBNJTtvaMT0o0K2:0yXvMzTMAmjpsIugSwPnIbaMwg2

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1