Extracted

• • Target

    eed20d8540eb472e785252dc4939c45284c40124ec850c82f69159ac91277bab

  • Size

    534KB

  • MD5

    c42c7615772c474d964071a4c46a64b0

  • SHA1

    f6f36f99b5ea815c0c90557bf4488dfa482b7052

  • SHA256

    eed20d8540eb472e785252dc4939c45284c40124ec850c82f69159ac91277bab

  • SHA512

    34b124cb634c20ef5b8d1134970196db8347825d7732158bae0e99263528ea958e717c7d2609b291bc3896c452a4e777c5b929792784c36ec512fc1279b899fe

  • SSDEEP

    12288:cMrAy90X8ZUQKhXp2ifZDG/G0wzhO5sj+fxWQy:kyu8ZUQGF0wVFj+5WQy

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1