Extracted

• • Target

    daa5f7430377d7f1106b5d09e150add73dd679e37c569676f7c83cddabd1d4cd

  • Size

    480KB

  • MD5

    6a76689984e6a7ef6fbc309f04d5a108

  • SHA1

    fd40ab64ea51082cdf5c83a1ec7d364350fe4c0a

  • SHA256

    daa5f7430377d7f1106b5d09e150add73dd679e37c569676f7c83cddabd1d4cd

  • SHA512

    829724c8aded94c7c108c78e7dc4925c201d9d887afde82263a0b3966467455cf37e2df4e4497922893294ba8b78ec5db37de8eaba0315b8ef02d15ac0c9df8d

  • SSDEEP

    6144:Kay+bnr+wp0yN90QE3/TAekR8DtdaDCzwp4GxoVMFpTcz7uBoF65SkwdQpJYW2s6:iMr8y90pkeiuZzwHxw9Uu82heklMXaR

  Score

  10^/10

  healerredlinedomordiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1