Extracted

• • Target

    4431ae33be51c227c0ad441132fa36ea745cb72f7dd674655d8d7d072420b173

  • Size

    682KB

  • MD5

    a88fb33d88624b95ac4fbc9420053300

  • SHA1

    94b120997619027d6d8d0a11bbb771bac194ddb1

  • SHA256

    4431ae33be51c227c0ad441132fa36ea745cb72f7dd674655d8d7d072420b173

  • SHA512

    30f435fa9e5db19c61c82869d5c8c815a877b4dce6f4cb64fc750025fec55c536692e2b7f4f0e6dd9a13b4d21f2759e17a2bb6acd9bd2ffa6e76db04b1172a15

  • SSDEEP

    12288:UMrGy90OIcLQD96innQn6JWQ4Jxk3BNZNm/fYIHNuOpqmRV0EzaJ0:qy/146CnXT4JxeBmNuOpqmRV0EWW

  Score

  10^/10

  healerredlinesonydiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1