Extracted

• • Target

    751cd6c6618b1c0f20d9242ac2004dbec7ed885113ff73d8e2475d3113eea057

  • Size

    666KB

  • MD5

    dfb60749266dc0ad90c8d83e1bafb232

  • SHA1

    e2070935b96e7163691ff29bcfb30dbe4ad1e6bc

  • SHA256

    751cd6c6618b1c0f20d9242ac2004dbec7ed885113ff73d8e2475d3113eea057

  • SHA512

    0adc753389600a5b47b667c49aaca668570b27f012c6bf73c2f8fc67251d0f5089240bc3c83b408ad2a6bf455f95afdaad3c2197ed265f79bb3eeb7d244a6e36

  • SSDEEP

    12288:eMrCy90f2f7Bjl8jJEI1i392/jeIesWp+KR1ttNXbw2wK5KjJSTlodm9PDt8Z:4ykBbwk/je9sWpFR1zNXJ5iMTlosPR8Z

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1