Extracted

• • Target

    2dd90e0d6050f73f9c95ea8236a9d4d83ce71108964c260e3a1195e8db2a54c6

  • Size

    346KB

  • MD5

    6f0085115ccf4fda77f4ba227986556c

  • SHA1

    54374b9f9a8273fe0c41d8872da00bc9d4912bb9

  • SHA256

    2dd90e0d6050f73f9c95ea8236a9d4d83ce71108964c260e3a1195e8db2a54c6

  • SHA512

    ecf1851fa72e4f5fd760696a66f2a45981e60ce09f9125955e2fe1d50a38c9a26e26cc2d8c048a69869fe1ba63ff4c80e62ab049790da7c8d34f930655084e9c

  • SSDEEP

    6144:KQy+bnr+jp0yN90QE1MGVZ8F/1XUkajrUJeioGIIWDUIKLw7NePX:oMrLy90wGg/mkdn7IIuUIK07Y

  Score

  10^/10

  healerredlinedubladiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1