Extracted

• • Target

    1394ca9465ca06a17bbacd5a5d2ffa6e0304eedbc42e8e4cd95aff118c2ea9a0

  • Size

    1.4MB

  • MD5

    3a8b22134a12428e33964421ed8979d2

  • SHA1

    e30f402214c3f90fd8bebff012168cde9faa16d8

  • SHA256

    1394ca9465ca06a17bbacd5a5d2ffa6e0304eedbc42e8e4cd95aff118c2ea9a0

  • SHA512

    0185c062182c6bc9a592765084c700a10801786fe0ada8803f12c2bb095386fc07e04ba5e77067474fd3cd2a0f3470e7beae776d2d2a98fa3687ea6b2585aa6d

  • SSDEEP

    24576:QyWHIfTCYMaH8FjDjHHxvlQnmfzuPmN6yiEWyhbdaiPi/Xqc:XlfTCYtH8Fvr7V6nyyy3mv

  Score

  10^/10

  healerredlinerumfadefense_evasiondiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender DisableAntiSpyware settings

    evasiontrojan

  • Modifies Windows Defender Real-time Protection settings

    defense_evasiontrojan

  • Modifies Windows Defender TamperProtection settings

    evasiontrojan

  • Modifies Windows Defender notification settings

    defense_evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    defense_evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1