Extracted

• • Target

    ab313aa14e927a6f8b74199db37c0bd3184fe906feb9f29c1cf7994ec3aedc62

  • Size

    994KB

  • MD5

    1de2d6f06970887c29e31bff52409aeb

  • SHA1

    8a0e8ca87ca091b66a20fa1aa516439031f750c1

  • SHA256

    ab313aa14e927a6f8b74199db37c0bd3184fe906feb9f29c1cf7994ec3aedc62

  • SHA512

    0ee690085e36871947a69ca7651a9ad24990538dc98d7a34186b12ae9b96edcf96405ecd7ed93d3a2066366a45e26020a84c4349bb43896a16fc70d2e05b9d7f

  • SSDEEP

    24576:9yGpagEeonSUgWojMfFADHCjh3BqFGXsyp3385Mx:Y4ZhoS7WoZDH0LmEsy

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1