Extracted

• • Target

    72b4feb93226dc0cafbbf170001fa1772706489cbf75b57412436d03cd6fc0acN

  • Size

    996KB

  • MD5

    90110a431b034143c46c80cd3b83b570

  • SHA1

    aa71b66b3b36e111079bbaf6b105e4e3de295491

  • SHA256

    72b4feb93226dc0cafbbf170001fa1772706489cbf75b57412436d03cd6fc0ac

  • SHA512

    a472b94290c27c2de8ccb5ba74cd179e72138fe05a67f2119c7e8a26099d4fd54af05e884dcf1822074af6bc136ed0eb8cba1623dd906c037da41601f3e03285

  • SSDEEP

    24576:kyRruA6OLb0a2Dmf37O45sqHMTpiMxaTWOnm:zRr46b0as47O+sYMTpx46

  Score

  10^/10

  healerredlinerouchdiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1