Extracted

• • Target

    3b228b6b48f179ecc7f2abe87354bf73582c13e2a3986d564f05ceb477e12907

  • Size

    537KB

  • MD5

    65b828471c69f28e1b841cac91d5a815

  • SHA1

    d3e621be6880b3c95fb047c988dbc03ab97399ef

  • SHA256

    3b228b6b48f179ecc7f2abe87354bf73582c13e2a3986d564f05ceb477e12907

  • SHA512

    b492e716e5bb5fb7799530c46066cedc16f8785371351aa7edb006511eae56c1f8685addb0aab11e279108e8650d78e61eba33897832b4b8b888930975887837

  • SSDEEP

    12288:uMrKy90nxRfcDMz8HMA+lZUrvH/wZH9tXtqf2xvzqtcW:gycSsblZofwR9tdquxvo5

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1