Extracted

• • Target

    6ac9d9c0272650e78026d66aa1caa6d40578271cbe7d6a7419717007e4949d36

  • Size

    1.5MB

  • MD5

    aa68e82e6147f679254c8b4815b498a8

  • SHA1

    4d9ac753cc3d1d5d079adae5fa2504b51efaed39

  • SHA256

    6ac9d9c0272650e78026d66aa1caa6d40578271cbe7d6a7419717007e4949d36

  • SHA512

    de2105e6815c6dcea7db9781958563d053575cec49402d10c8bfcd0d86effd1dff5a62ecd2eec0c66acaeb10d754fd7ac43b539bd8e4f6408ff88c15be84fe09

  • SSDEEP

    49152:G5nCMyzKBZ1EyWUXE08W0pnDEWgGRbb0:dceqYK

  Score

  10^/10

  healerredlinemaxdiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1