Extracted

• • Target

    27b91a0916315bcd7ff75a66518ef8e52150d5e85e1e122a0b6139cc7b6bada9

  • Size

    409KB

  • MD5

    25e0c582246025bf2cfeb9742e327900

  • SHA1

    78ab2ff9fb07a7e275975ef7f290576d657f26f5

  • SHA256

    27b91a0916315bcd7ff75a66518ef8e52150d5e85e1e122a0b6139cc7b6bada9

  • SHA512

    8640eac250b827ac06930d05dfa8b8c28e76320483ce8bac77dae313fa6c07ca2da0a4afb276f39a4c5aa2986d7678fccf0deca21ac7ed64a591b38f7a475827

  • SSDEEP

    6144:Kdy+bnr+8p0yN90QEvVw+oMY0G1GA4q9bUC1oif/F9FMxpUkx9wwso1IH3txW:bMrgy90tVlun1Z/DoO/F9GxpUkYi1x

  Score

  10^/10

  healerredlinefuddiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1