Extracted

• • Target

    52592d76b4328df28f9de9d1e344d2942353b36b919e91f4fbb01c2295cf0f15

  • Size

    690KB

  • MD5

    653cf3ba02f96ba10ef84d849b210595

  • SHA1

    5aaec3311ab2c2198b32c01ed54914755b094c0e

  • SHA256

    52592d76b4328df28f9de9d1e344d2942353b36b919e91f4fbb01c2295cf0f15

  • SHA512

    25bc944d0945bbeb012123c3949e3451688816bf397cbe940552783ac4b2658268e2aefa86d3d16d0b0cf49f15656a7ba0585587226cab82416342117b8e85dd

  • SSDEEP

    12288:oMrAy90yOOx2yicDWIRDWektk2KcVfNTb5BnmgcizjXRMhQwtd7h:YyfOo2yicaI9FPf4LmizTS2a

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1