Extracted

• • Target

    d1d80f41da1a1ffe4cf805c412670af27941cb9cb2daff1a3e940c1e371f2add.exe

  • Size

    540KB

  • MD5

    658fd4e720e5f9b33496ffa1e36ef992

  • SHA1

    a60b27785fb39ae11c1cea9c0a2c8db006456134

  • SHA256

    d1d80f41da1a1ffe4cf805c412670af27941cb9cb2daff1a3e940c1e371f2add

  • SHA512

    274f3c5f679b7479d33fa576a71a70bc9182863968b864ba0c278f138e9269564069dab78c7ee78b3c1eff927d911974d2c21370b824602bd504ddc4de6a6356

  • SSDEEP

    12288:oMr4y90c2l9ZcyVtyaTtCNPJZkzcMIROCaYtvd:AybeZ1/nTtCNRZyc0Ca4vd

  Score

  10^/10

  healerredlinedowndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1