Extracted

• • Target

    04b5111914b0ca11fb86c4151e4bd3ace9ee0c75ee0aa2fdf3b67881ba8e94f4

  • Size

    478KB

  • MD5

    8692d2c5fb35a9da73b7c901ca492137

  • SHA1

    dc65424197b76c65912afccfc39a26e1ee093a61

  • SHA256

    04b5111914b0ca11fb86c4151e4bd3ace9ee0c75ee0aa2fdf3b67881ba8e94f4

  • SHA512

    12d0133d21dc72822af97844cdad7dd487fe6f00d2dbd8fe768ea535cd25c922b7c363956dfad4c5cac9060c8426911de80c4e4cec1122784ab6bd548055863c

  • SSDEEP

    12288:sMrUy906vbfi7DkInpdXt565VxktvmY8Ew:oy9bfiHkInpdXtoVe+Y83

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1