Extracted

• • Target

    70ff5c7e956b068a83ce80fc31bfb86c1910addeaa440b531b4aae3d0a2f73c7

  • Size

    726KB

  • MD5

    b6373c991db44a13ddce2cac8145c302

  • SHA1

    40a6e3fb19eadf5dc905ab8251f092e1982ff344

  • SHA256

    70ff5c7e956b068a83ce80fc31bfb86c1910addeaa440b531b4aae3d0a2f73c7

  • SHA512

    b72c4a488a315cb3a2cd4ec8cd9111f6943465e817d418c7a9bf42362b3aa64b80268fdaa5b0d479eeecf64f66c18d88626f0ebab2d7bb5929b26a8d165879e5

  • SSDEEP

    12288:vMrPy90/XeF1nPLTahStofEKLRCJNtg1NwnezwnGx6lsLzAVzXEL:MyOXeLnPvah7EoIK1NwZa/LzmTEL

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1