Extracted

• • Target

    6af1ad743f1b34190146fd6af39b329caa6e39d86569eb9872c44b38f730c84f

  • Size

    547KB

  • MD5

    1119a67817c6767ba4923ab54806659e

  • SHA1

    c51a77bb4ac4c8e8b9f87378057fadaa4c221096

  • SHA256

    6af1ad743f1b34190146fd6af39b329caa6e39d86569eb9872c44b38f730c84f

  • SHA512

    7eabce4dfa5f75828f775f7fe68b96044ed5da1d62a71d7bf3d3756d9d37fa1a3f7bd7d83e9e409399b4f798420e03bf97834fc07fe287762366c1847a4545e5

  • SSDEEP

    12288:0Mr0y90RWQN93yN65hLuBwZobTLb5BoKHemJ/v7Fr0figK/O:4yaWMCAfaFXbj+mJ/hr0agz

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1