Extracted

• • Target

    9a146383ac5d7c05585b9649e710f9c9d00ea3912935d4d920d921bd77a93977

  • Size

    545KB

  • MD5

    7215375fcad0efb4e1e023f2350d73f9

  • SHA1

    64dfa1ace50e1e0afca2d2b8c9d804aa8bcde653

  • SHA256

    9a146383ac5d7c05585b9649e710f9c9d00ea3912935d4d920d921bd77a93977

  • SHA512

    10642397e7ac1fc546737c86d14315f94c1cdc01f51ffb2d240a8629c0c4c12e71e3b0b494c04b29af4390683d08a0305bcdaf0064f119d046e092dd736d4cb2

  • SSDEEP

    12288:fMr6y90HO+UihXkVObbRzQFWvqjxm5lm3q0iK7:5yX+ZhXkcbbWFWvqjg5lWh7

  Score

  10^/10

  healerredlinedowndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1