Extracted

• • Target

    98d39414f451e8f1f1ad1b53ca16f95910493c76fd48061bb11bafd58ec6228e

  • Size

    478KB

  • MD5

    6a35ca897a0119a199ed304e2111a0d0

  • SHA1

    5e3d2902a79308a246ec30a8f14b4d47ab7b713f

  • SHA256

    98d39414f451e8f1f1ad1b53ca16f95910493c76fd48061bb11bafd58ec6228e

  • SHA512

    b8f7924b6afe641e933bfadebd22393777895419f255d602ef5d81dc32eee8a51d5413b6214a6c38d8d97416dc201a2baf1c9c23638eaa97805aecfdaea38d9f

  • SSDEEP

    12288:/Mr0y90Cq+iolXdDnbOGO/RhdrLe2NY+6bg:vyXq9olNb2t/q+6M

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1