Extracted

• • Target

    c3260396680e66a9c150caab27c63341e0c0c52c515b978ade84f44fbf52b9eaN

  • Size

    987KB

  • MD5

    65322a0f694472271e63552f864399a0

  • SHA1

    15d714929eb0d4c75cd98c0272d9daecbe64cf91

  • SHA256

    c3260396680e66a9c150caab27c63341e0c0c52c515b978ade84f44fbf52b9ea

  • SHA512

    54e15f4aa582e0bccd86414b883c6b7258deaa472df7d2150c85d2ec12983025acbb7f462459d41ab17be15f398879d2a704f259598393674accf94faf964aa8

  • SSDEEP

    24576:1ybKUIJP1S515RGpbiWpC6dgiulSy3+kgkAZ4y:QbKUIJo8/C6d1udjAZ

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1