Extracted

• • Target

    49c4037c84faf8a3e9794449486b3d5924f8aecb44a4cfe06787785726f0ea0f

  • Size

    726KB

  • MD5

    5a03b5785a7ec49111ad38b26b2ad535

  • SHA1

    67d2e1cd60f1533704a821bf6b2867fa6086eb50

  • SHA256

    49c4037c84faf8a3e9794449486b3d5924f8aecb44a4cfe06787785726f0ea0f

  • SHA512

    14c91d7027c667f4ee87b9d58245e61ce3a6c9e37174d07e3d643b2a267972b9ca6c94229b99f972fe6d6d59d74682c8777c7e48bf56bc8f997e35af8d1735c1

  • SSDEEP

    12288:FMrHy90CxDeOs59nBSXK6byOGVwc5DINgCTo4BB7lJnBqdwZIqio50JOP:KydxyBSEGc58NgCTVBBbs2GJoyJc

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1