Extracted

• • Target

    c50a86422bee625d16346353a9e86b6d2bba6b74db0d94d716d90b79749ba46f

  • Size

    690KB

  • MD5

    eacc30a01550b64123d6eae81f95b8c4

  • SHA1

    60cc52a08e137afe7e9dfcffce1ab906d5f9ebe5

  • SHA256

    c50a86422bee625d16346353a9e86b6d2bba6b74db0d94d716d90b79749ba46f

  • SHA512

    59405ca19a835d92a34ba232e42a2f3f9722e63a7f2652fb4e5cc7a832275542b01f62daf43dc9e27e8aaddfbae60dbce14d7f41df53f2d04a2524f452a71546

  • SSDEEP

    12288:cMrWy90EHC77V+omc1reJzt3+LUURqMZNFALRQRn0s7XZY3zAs8k:ay2XIomar2tuQAt5MGRnjzCzAA

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1