Extracted

• • Target

    39702043f2c0d4141db3f079b03885ffc5cfd111be07002151033852605ee00e

  • Size

    537KB

  • MD5

    3f6460a7c3f7b649cc1f6f208780491e

  • SHA1

    755a6b37003223a40b5e6eff03c0d34567c340bc

  • SHA256

    39702043f2c0d4141db3f079b03885ffc5cfd111be07002151033852605ee00e

  • SHA512

    d50d02ddda1702221094f11c465d23faa5b4d6987e71b9481df40183d40d837438e4f4fdf236e4d3bbfb3f72539843a7d12d6e8eb7f97924d9eee9f659de98e5

  • SSDEEP

    12288:gMrpy90kLgarwufahQB73D7VqOLi9LDnnYyqwePTy:Zypga0uUu3D5i9LbnCLy

  Score

  10^/10

  healerredlinerumfadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1