Extracted

• • Target

    a4886e8ae4c4dd6113783459ae6550745429aafbf163975247c195bbf39a3c79

  • Size

    667KB

  • MD5

    6ec8740288224d45e7a7be37aa106a06

  • SHA1

    177c6eaf6a9d732e80e88d9108cff5d211e670ec

  • SHA256

    a4886e8ae4c4dd6113783459ae6550745429aafbf163975247c195bbf39a3c79

  • SHA512

    347a3643f482a99c65a6694cdce8bb4346092d2faca79be818986a99a93b36d6cc4dc4c0eee5256f8584d8b417d0ed0d0d348fbb5b12d383e2a73dbe3c1e396d

  • SSDEEP

    12288:hMrAy90MG/D4hgVzulZ6PvmLEO1T2MXN9q9folsckOBCpFOzI:hy8D4hgzuzwv/MTr0oF/CFD

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1