Extracted

• • Target

    81ce669b561bf3ab249e0f1c80b1c569df73986316306063c3dedc1048295194

  • Size

    481KB

  • MD5

    ee92f54b125c083d053d939f1e6ae679

  • SHA1

    6db419f201fd76968594e418e447ba404ca91f83

  • SHA256

    81ce669b561bf3ab249e0f1c80b1c569df73986316306063c3dedc1048295194

  • SHA512

    06bb588a6edef000230ad9e97058c0ee56cfd3288691b504760eb71c024570b3b2f8512c1bfb02a7681879d08a83ffa9eb26f8d0a1d91ca898c40ab0ff5081b1

  • SSDEEP

    12288:QMrty90l+EpyppcHErOC+91AUPqSsXNJUs0KZ:tyU+yypp4Err+9WUy9NmsFZ

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1