Extracted

• • Target

    7a1d0bff8e0f8573f24b58a55cf518814424da23e626f9dd55b2485e87604bbb

  • Size

    479KB

  • MD5

    91380963df88064e909e4b6305a991cc

  • SHA1

    9a8bc97f550b58899cd2fea1e410adc46436a804

  • SHA256

    7a1d0bff8e0f8573f24b58a55cf518814424da23e626f9dd55b2485e87604bbb

  • SHA512

    2ca94f4f79451f1573d5709982e6680ac6d89acf7e6590ead21438caa33201aac5272ec03584ef73bd6090e197d5ea9f577ca7997690d75c7c306621de720958

  • SSDEEP

    6144:K7y+bnr+mp0yN90QEV5tUba9G7lKEqvj4TnIro/0krK9Q35awzFq2/4iRB0r6YsK:dMrWy901K0NvjInvnp5awkg02Ysxc

  Score

  10^/10

  healerredlinedumuddiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1