Extracted

• • Target

    6746d78d18fa8555ab6ad08c04fa180a2d01e4edc304cf01b62976dd7db51a15

  • Size

    538KB

  • MD5

    a82a1b3b19c2e5526b01105fd6a05fa3

  • SHA1

    9752eebdf5cdc70a5bf9ba64d2ee83f781696b79

  • SHA256

    6746d78d18fa8555ab6ad08c04fa180a2d01e4edc304cf01b62976dd7db51a15

  • SHA512

    4223a78aed9871389bb3c4293b11e5bc172666eb895b135c02072e28084857c56e4c398908a29e1ab31a2f26df1f0e165e3008c97bf9cbc78e81ea6eb117df66

  • SSDEEP

    12288:OMrmy90jPEBhpDMyh4w+dD/SHP5xWl+ott3whPQentPG26dxHrzG2yPu:Uyggw7lAxxWlZtghPJtPb6rrCZPu

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1