Extracted

• • Target

    ada5c9700280ffd3527f3ff2d5f904248502a92ef901cdd89e9cdf879e3df654

  • Size

    478KB

  • MD5

    35f21a0024fc7f0ff978e6a27068432b

  • SHA1

    628f0f43b77455328b8bd0c1dcc8e027a6a3155a

  • SHA256

    ada5c9700280ffd3527f3ff2d5f904248502a92ef901cdd89e9cdf879e3df654

  • SHA512

    92dbef5227ec7d935e3f2390959df2dda6a8c473c0e0b597f681fdc9d1fe490d18e51b4db72fed664c420a1d8b1742ee12bc80c14be8f51dbcb14d388ffda9af

  • SSDEEP

    6144:KHy+bnr+Yp0yN90QE29K6tXX2CyUIQNE3VOT8/HKps2RZACtG/mWrRY4xsZaQUub:lMrwy90EvH2C0ZVOYkTZAsOY4xVdiqc

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1