Extracted

• • Target

    6a7f43ab318e5b18f877accb28b2a26607c8dac82eed67e6169c966b3b208d0d

  • Size

    836KB

  • MD5

    9ce6d84d73447699e902be2d4d64723b

  • SHA1

    04b8b048b539e71df5d072b61e5c0f9ec04c7e65

  • SHA256

    6a7f43ab318e5b18f877accb28b2a26607c8dac82eed67e6169c966b3b208d0d

  • SHA512

    e7c8a8972ef57450bd2bf1f453af1fdffb00ecde1129f46feea5cef67d44ecd6f7372d67ee4b3e0544537f8edc9b40758ae718c096866bd2fc52cc0594aa881e

  • SSDEEP

    12288:wMr9y90iI6vnoqbbzLEngkzvwEpxx5SDbuBXsR37Mn3OvOjzsAiIBSzCIR51AdKj:dyeEL70vpVqWsRk3XzdiRxREKj

  Score

  10^/10

  healerredlinegenadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1