Extracted

• • Target

    3e42cbbe6fb89aaf3a4cfb7117eaa30307759e3bd7100da31c6723f5ce035175

  • Size

    501KB

  • MD5

    0fdfa82b4752467775ef3c4e0a97e0a8

  • SHA1

    9d871f1a953ea44efbebf0d80c91a9129ed8c241

  • SHA256

    3e42cbbe6fb89aaf3a4cfb7117eaa30307759e3bd7100da31c6723f5ce035175

  • SHA512

    f9faf27af94d2674510cb2c04a5eb627a936a12a7311f1bdf53a672b5bbddef3a4f147b4caca1ecac46dd0f905ce4a75870eb46a5badc10acff0988748288d84

  • SSDEEP

    12288:RMray90npb0zAFXDlUGXWmBu7y+w9npLpk+:byEwMTUGXWmI7y+wjn

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1