Extracted

• • Target

    cc85e344525d0c2840a5aaa9976f791fdf6ac56c4cfa065c655ce200bc0f93b9.exe

  • Size

    1.0MB

  • MD5

    92dbab2af1099e1b23e30495f16d8673

  • SHA1

    7b0b3d0ebbf9c563c0f67272145034be6c7018d5

  • SHA256

    cc85e344525d0c2840a5aaa9976f791fdf6ac56c4cfa065c655ce200bc0f93b9

  • SHA512

    f37793f8707cec27d4d035df75df581081ea7e8c824850cbbf15debdf7250f3915e2a5a47c9961ceafbd4a03646f7253804e23dec4ef0bbd1759e690eeeaf5c0

  • SSDEEP

    24576:Uy+MgtZT8C2RC/IyxiHlvNvkhN2MgixQMiqAo9AL7:jN+ARCXiUMSxWrNP

  Score

  10^/10

  healerredlinerumfadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1