Extracted

• • Target

    98911fd8a0add59487ad3b8e8e80d6340f93ca22180f44a5f2cb2a7682bb35b9

  • Size

    482KB

  • MD5

    955ace8bb6f5c03bf057b2e6dcd338cf

  • SHA1

    b1446819736ae3b1881605e919100ae5c54c1d45

  • SHA256

    98911fd8a0add59487ad3b8e8e80d6340f93ca22180f44a5f2cb2a7682bb35b9

  • SHA512

    f924574a84e51cd3b9cbce482f29248c10cb6fb02a786232afc47f729063bcf2d0ca98dc0db0c9606d635bbcc5db9d26dafcf685c6e128fcb3ed0bc532852fcb

  • SSDEEP

    12288:BMrQy90dDTo1YgrmaX/C4KzEeHGWrqJp/k8ojw:ly6Xo1Y+6HzEOcp/k8r

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1