Extracted

• • Target

    743c7ecc1b2327efc0d92dddae63018512701332cf3617d37261e5ddd218b3a9

  • Size

    478KB

  • MD5

    2180657093d5cce3820ac8fe756c0a9b

  • SHA1

    67d259243cf28394ec8337de50fc182e053ca108

  • SHA256

    743c7ecc1b2327efc0d92dddae63018512701332cf3617d37261e5ddd218b3a9

  • SHA512

    bc8b8adfbf057c51d96b61c644f558234f56167f8d8ec4f20c9ff3b113c98713a459749a712154f098a0132bce6947d84db785054cdda1ed0e0bdae5baa63e12

  • SSDEEP

    12288:bMr8y90FuNLDVl/M0Udgzo86J7v/AHtZjrezr:Pymu5VlUbdg8ZWH34r

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1