Extracted

• • Target

    c346d1cd72da1896cfe65ea5c8a90b90558f7818f97b8bae25ea0272122ce85a

  • Size

    673KB

  • MD5

    ee68195e62d890a267f75f149fef1b80

  • SHA1

    702084682aa52017f2f9e2e297aea012e1d8c6e9

  • SHA256

    c346d1cd72da1896cfe65ea5c8a90b90558f7818f97b8bae25ea0272122ce85a

  • SHA512

    fe7addd88311df41e671eb4e4baf6e02704e83200bab55a3689f30607a3efaba56c8c5fab176eba659c09325425e9329686499e1c2e4ea83d15a2fb8c4796106

  • SSDEEP

    12288:OMrly904O/TxNAlQG6kh4GPoCnNcuHyEISTDRmvoyY5uW7eNKPV8hPx4:nyK74QG6khVPd6uBdw/0uoTkPx4

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1