Extracted

• • Target

    76505f6f14a51d19846833f3d4d3d2e3d3dd179326256ce8e246c5e6010239e1

  • Size

    560KB

  • MD5

    8850acafdd23444b7546d3c7464a1f52

  • SHA1

    ef642c19dd01d2e35e93d078e6cf325807676dce

  • SHA256

    76505f6f14a51d19846833f3d4d3d2e3d3dd179326256ce8e246c5e6010239e1

  • SHA512

    6a7b3736544e42e7b180d32d64c3912c7c0d9c53ed76c395b288f9685fec6a2c6095783cfbfc52684498b9776fca14482923dd19578625ec27564c55b209d0a4

  • SSDEEP

    12288:bMr4y90lroyshJ4ccyN5O3QZesZYX2USRlcgI:PymjshJ43yPYOeZGRlc7

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1