Extracted

• • Target

    709fd22b7f1bcf6d1f4ce12b64352cec243988760244f24c143df3d8d98615ec

  • Size

    500KB

  • MD5

    3c5369014a64c9ed52e105d504bc0ddf

  • SHA1

    fe87096f9e94233ff01a92e90db077e3821ed6df

  • SHA256

    709fd22b7f1bcf6d1f4ce12b64352cec243988760244f24c143df3d8d98615ec

  • SHA512

    9badf9c2bcd7e8ecee1b903bfbd47631fa39b77874d05f08216a891d4876bd6b5ca60adf6561a18b1f14f769cd2edf68370de0f5cf02f539f8fce5c8d1f6170d

  • SSDEEP

    12288:vMrOy90ylSiiUgzWOJprcI9n0Rp8e+fel0:1yIiipfJxPnOp8q0

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1