Extracted

• • Target

    9b101480e28d6207768f930c3807cd945b86c399d4c9a9e9d0349266c46a1219

  • Size

    387KB

  • MD5

    0de1ea15d780f4c053d28c416c06b552

  • SHA1

    7eb5ef617e6dd68aa9c2c74c7cea44951ca1e1c0

  • SHA256

    9b101480e28d6207768f930c3807cd945b86c399d4c9a9e9d0349266c46a1219

  • SHA512

    b82282b62314db1dd966eb5317918863e1bd161d4b7619ebda6aa1ca5f0371783b88ee3fe96597de96e7af806d7a5e6cbf3833e7a27c4290ab7dee1230cdb5f7

  • SSDEEP

    6144:Kmy+bnr+yp0yN90QE8AJwN/eRKoEbN2D6ZkJBvYb452tuMHZfzeEwBYZqmkFVdXV:CMriy90lJ8/hfwlabbtJ9zwYZqmkFVH

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1