Extracted

• • Target

    b37c7a92be4252134585da6c5cb7f66c996c5a775885353c38511ea349f472ef

  • Size

    723KB

  • MD5

    b5a5bd864a34b00e3f03fecb2697552b

  • SHA1

    8180c1f02b9f9b6bf77471d3831b6b31fcb62f42

  • SHA256

    b37c7a92be4252134585da6c5cb7f66c996c5a775885353c38511ea349f472ef

  • SHA512

    a4a444c697b3e534deb7ea6ce90a25cb48ce372f8db345381fa1a64ebe0e29849bd8ddb6ea579cefac9cdefad32486f51de39071c7e46e212f3eab22510ba3e9

  • SSDEEP

    12288:BMrWy908s/VrdEwMgIEQP3A5I3zkAMXXOaTBrdEYA0pNqbar2SKD54iT:7yS/FdEdwIDkA8XhpdEYAwNAoJiT

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1