Extracted

• • Target

    4fe7960002e1318e05cf6f25da9dbbaf433cf8e12f008551c67894b8e1da1b9a

  • Size

    392KB

  • MD5

    879ffa4e0c552d64a31ea8474b580fa5

  • SHA1

    13d1bb2474ee8f64181bf1b5173085436fb47663

  • SHA256

    4fe7960002e1318e05cf6f25da9dbbaf433cf8e12f008551c67894b8e1da1b9a

  • SHA512

    4f13d7e6752b2511db749e71f4d5b32251146427e865aa2bfc241203b7bfcb64ab18a57ca6a9ff3145e20a5a173cc892d81419a36c745b9cee16509a929c1950

  • SSDEEP

    6144:K/y+bnr+lp0yN90QEmnUHYO+EYJjcXr2+zte+sP+0YB9YKTcruua:JMrly90UVZy72+ztY+0wiicO

  Score

  10^/10

  healerredlinedizadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1