Extracted

• • Target

    b9cd90c53a6dd32d67a0211e002d5d4b43b8a8ec4741208417df72704fa55e80

  • Size

    500KB

  • MD5

    9fc71b09740f9ffae9b729cb8b18186e

  • SHA1

    e5d17ccda6ba5c9a3941b88b2be193ab634a7872

  • SHA256

    b9cd90c53a6dd32d67a0211e002d5d4b43b8a8ec4741208417df72704fa55e80

  • SHA512

    05972f7cb05f181e4357b29d418308a013aae0702012a37f100ae6ae239fd34859d4a75a9ffb6be54d7a2eff1ea116308cb2671c829384698a6a31aa111fa1b7

  • SSDEEP

    12288:ZMrYy90bppvqxMltcwSRW/nipZgN2tSy:FyUp1k2tSW/4SuSy

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1