Extracted

• • Target

    26e3e8670e81d9725bd9e98be2eceedfc47f2670571f3417f48ca62b6dc84940

  • Size

    675KB

  • MD5

    c9cba6d95cf7368f71a5f858727481ee

  • SHA1

    9454efd5011c428ab2df4dbabf15e266d23188b8

  • SHA256

    26e3e8670e81d9725bd9e98be2eceedfc47f2670571f3417f48ca62b6dc84940

  • SHA512

    1072adcf7e878a14eadab9745f16764b145f262c160f81536683b5599b02223f5dd95c455870f49ac9fa4399325843eb21b6a54077093ee51ec414ab8bb4c314

  • SSDEEP

    12288:7Mrcy901xSNf+xphK+IVlRUTUgaFENyv1PXNs4t5Xj3YkqD:HysEf+9FIVsYv1PXN7tpYz

  Score

  10^/10

  healerredlinerostodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1