Extracted

• • Target

    4ee55e37c1ddc8aea79e9bb4e362b0aaa48ef25b60f85f9f1894f6aedd531d6c

  • Size

    908KB

  • MD5

    7cf392a3deb04dec57b8523005bc488e

  • SHA1

    dd322a86a06dd2b8b43d63f53a445650c937033f

  • SHA256

    4ee55e37c1ddc8aea79e9bb4e362b0aaa48ef25b60f85f9f1894f6aedd531d6c

  • SHA512

    d6c8c88cd6fc2a2d4c5eee28c29340a02766231cecd3bd1a9ddb307af83afcae1c94973953932c2cbff68cb5dfb1b2e1e83f704c836b47cb1c009ec584d640bb

  • SSDEEP

    24576:hy60DlLNosFWm0UYGte5/q8SoEe3aZrY6:U/lLNlFr0UA/D//qx

  Score

  10^/10

  healerredlinedowndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1