Extracted

• • Target

    ed3ec7d1c48dae459f1210f3c218c54d662b9e6dafce18002c2816af0ed39260

  • Size

    1.0MB

  • MD5

    e5b081a487018b2f23a35abd4e43dee9

  • SHA1

    78b8d17d9cc1edc4014e6342a67c498b728e61f3

  • SHA256

    ed3ec7d1c48dae459f1210f3c218c54d662b9e6dafce18002c2816af0ed39260

  • SHA512

    0ec3a685e94ec2b37d5ad4d39cb76c4b3994d97f2a31d114dbf05527362a8815cc3ee01e8ee08040011a8044dc22950d6a307f49d2327b4d7fdc5917db5e67eb

  • SSDEEP

    24576:Qyx89cVcd0TpYgJ8+4vhMFvAT5N3ro7JpwCFiJN6ylg/e:Xy95O1YgC+Eav05Fs7JOCF2Uylg/

  Score

  10^/10

  healerredlinedowndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1