Extracted

• • Target

    878a1fc02579c37f7ebfee0e3a35b0e16884bb2af701d2de65080fce3cb8b3c4

  • Size

    3.1MB

  • MD5

    8cb6d463ebaca729bc6250586e487e3f

  • SHA1

    ba77b0cc638df4749d90386d14f0f077a7a887df

  • SHA256

    878a1fc02579c37f7ebfee0e3a35b0e16884bb2af701d2de65080fce3cb8b3c4

  • SHA512

    160b41b33561f15132a06af012d7d67c2f347452b1a96d09008ea45e4e523bd403c1434787b76a3452abedef8156ffbdc4b04dec06f13314ad6542d6ba033250

  • SSDEEP

    49152:MpFzUE1/x5XSke5ec6a3vTlsn35QDS1h2b6CtI3jc8U8kE5:MpFzvSk1OqI6mgw8UXE

  Score

  10^/10

  healerredlineramondropperinfostealer

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Suspicious use of SetThreadContext

  behavioral1behavioral2