Extracted

• • Target

    c4fab6d95b7d02b1ad30ab5b8d8dcd6ebe4adcfbea2c80246ef5c4990e3dc959

  • Size

    684KB

  • MD5

    bc48d9db778e502df154a423256683ea

  • SHA1

    5ec6daae377f70703edfcea5535b0270bbe559d8

  • SHA256

    c4fab6d95b7d02b1ad30ab5b8d8dcd6ebe4adcfbea2c80246ef5c4990e3dc959

  • SHA512

    1128854d71e7160328425231d0c648f46ceafc41464b83b24d0b0355345902377710258b43b819f798f83f8451e45b1dbe1a03d2c0ce8166e7b0373567b80a5c

  • SSDEEP

    12288:nMrEy90ofsrP+vyxzOHXgz9l2kGBCyaxmjXN+uqMZj6TtknH:zycrPFOHWl2P4KXN+uqqGm

  Score

  10^/10

  healerredlinesonydiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1