Extracted

• • Target

    a1e89e5df19e205201165eb28cd84991ea4b95b4d3e50961ce23fbaa9c450f4d

  • Size

    500KB

  • MD5

    1f872caf27c444f1c3f44e6390aa4347

  • SHA1

    587b241a682635c6c5b864d35a7c44a016fb0b11

  • SHA256

    a1e89e5df19e205201165eb28cd84991ea4b95b4d3e50961ce23fbaa9c450f4d

  • SHA512

    2b9632619b437f0b1dcab1471fd5c5433cccfb5e1f0dea09cd3d6f88437728f4210cb547ae18b6fd8a44f6a7c2d8e74b372d084c180015e013b7297d9283e0ee

  • SSDEEP

    12288:XMrny90SZ6IjV1CrfeVj7YS8G/SDC6z2AhT:4yPV1LlYS56zd

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1