Extracted

• • Target

    34a6bc42315ebbdbe5f693704e4cd10b6d57535ca569fcd1d34153f6dd1c3210

  • Size

    1.5MB

  • MD5

    37769598e001b5c80bc606c023aa7d3e

  • SHA1

    e631e524b00064bda0fedd1fa6bafa02aa7505cf

  • SHA256

    34a6bc42315ebbdbe5f693704e4cd10b6d57535ca569fcd1d34153f6dd1c3210

  • SHA512

    b332be1e31e6ea859190506c65d062ee81671e6838b5f3491747f8ec3f32d23ebe6cc933937a119431a956fb1cabae99035942be67621e0dbeca24533175f889

  • SSDEEP

    24576:SyQkiublQ6G6MSdXRuVuwnbVcOs9SshrhDow9kxz4KPSDDnmg1uPvjsBxG:5QilQwJuVuabVDMBhKwaponmOunjsP

  Score

  10^/10

  healerredlinemaxdiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1