Extracted

• • Target

    cf13e82163e293c02b0d289163cc0a9b53eea817da6a47d6ed4f87c73353fff4

  • Size

    659KB

  • MD5

    e2cbca36031541a34f0eed3addfb4723

  • SHA1

    73bd61c5efeb68503e274a5b5db72af572a0092d

  • SHA256

    cf13e82163e293c02b0d289163cc0a9b53eea817da6a47d6ed4f87c73353fff4

  • SHA512

    343dab102a0f85838a809cc1f6ebcc55417a8d44bf3c52db241d284d4744ccf5fd94626ca9f9f724e53f5172a8057aa581ca2d9037fbe84eddd83e5da06c3446

  • SSDEEP

    12288:uMrmy90iSdb8QsnllwdQp3CPGNcraehn+EQZxHZo:cy9cbdAlwyp3+raehn+EQzHZo

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1