Extracted

• • Target

    7ee7850ad2f65f78c230c42d92be2a99618046d09c96c275dbf8f89308d529ff

  • Size

    536KB

  • MD5

    7c77bf09ecf8d38318171dee70ee3e21

  • SHA1

    e22766c10570d5656fcb5982699928f78ca4021e

  • SHA256

    7ee7850ad2f65f78c230c42d92be2a99618046d09c96c275dbf8f89308d529ff

  • SHA512

    dc6f9405b6d7c990e8e99d244758ad930073e16b4178c4d1e026c21447d72dfa81db4209d6b514043d4bd66761ac84fb4fc1752546d59c7f0559552410f10453

  • SSDEEP

    12288:QMr4y90/a6dfmOwosiEnCcblJtx/uifq18n7y4PQz3:4yQa4faEEnfJv/u+q2PQz

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1