Extracted

• • Target

    30c23518eff241b052532d2c99f786c3e964e98f78f9e4db327ba03c7739c1f9

  • Size

    1.5MB

  • MD5

    721c8a7b74033a5e531665b81030ace1

  • SHA1

    4ca45d1f5ad1f38e306031ce8febf97930ff89f7

  • SHA256

    30c23518eff241b052532d2c99f786c3e964e98f78f9e4db327ba03c7739c1f9

  • SHA512

    673d4fe9935f0488effbb503fc88c27b804df312d551be7a3c4be0079573b760eb4aba20773cb270dfdb05555bbe646f8df69043ef364baffc964f679f874168

  • SSDEEP

    24576:VyW8hCKerKRuWN61Y4WUQf5Jnh8vR44U4yM7Ud4YhZHRv7BuZV4+grO9uzl:wNSm8Y4WLPCvR44BnYhZHRv74ZVH2

  Score

  10^/10

  healerredlinemazdadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1