Extracted

• • Target

    068242821b22a66a123b067aa5d588f2875329d2d7c4d15f56a9d0dffd1a0711

  • Size

    671KB

  • MD5

    a75be4620f57692f422beacc17d5fd33

  • SHA1

    cfbff2f91ccb078db34b77b911317df44bcb69d6

  • SHA256

    068242821b22a66a123b067aa5d588f2875329d2d7c4d15f56a9d0dffd1a0711

  • SHA512

    243a154228f491f12d81ab97a3e988987bd9b688b9e351004d07b95cf39c623e17eae024b2f522fd5bc0c9acaa45cb93fcc23cf393e5b078205afdd52eb4caac

  • SSDEEP

    12288:WMrOy90A2yvfyELpmgws87ukZ3EO0fgw7Uj204FX3LqsY+b+uWf3d:8yzfvfyEnL873FEO0fES0kX3Gs1b+uat

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1