Extracted

• • Target

    47d07db5f36ae48750a859fc16db5eb6c0e90228d4967d8d70bc636dd0ac027f

  • Size

    672KB

  • MD5

    ccbc16e0bd2386ae3ea2dcc36a92ed97

  • SHA1

    49912059d72a91154d7246337bbbf061ff5a1e53

  • SHA256

    47d07db5f36ae48750a859fc16db5eb6c0e90228d4967d8d70bc636dd0ac027f

  • SHA512

    a8453564280a5fb22b398fdf8a5fb6784d0c7efefcf47dceb2eeec5d935c7e81ed0a12d3fc58c50ed1903fe388fbf2898f1b5ea837b2d7bf69bbca2626f44273

  • SSDEEP

    12288:hMriy90PIL0ps729RzdLpGlGBMN2BckJjaFAPM64FE6ombp+YwBflpYPXeXN0J:3ywsaRBLUl5NqZGSb4a6o1VzeXeG

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1