Extracted

• • Target

    e83b9b9d211c83726980bb1db3d415ab0e26ef09da9d0e1def821b0e9e001bfd

  • Size

    817KB

  • MD5

    88269dcd8ff73d9f10a14198d4fb4284

  • SHA1

    e1131bba46f55ea45f82ae823e92a16cc24d6b09

  • SHA256

    e83b9b9d211c83726980bb1db3d415ab0e26ef09da9d0e1def821b0e9e001bfd

  • SHA512

    bfe7fc39b68dee78c7b8512ac2f9a3e819c2dc396bcfb8bc3012ec0f90d40f6433f023040df27d2908473eda650360642822ded5f7ffe1e7e7c582cb3acbb73e

  • SSDEEP

    24576:dy/5/H6oU/OCBzzEpcp/MCrLrXhcGzwkYkFR3wt:4/5vTezEukCrPTzwkY

  Score

  10^/10

  healerredlinedubkadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1