Extracted

• • Target

    6d70eb078d421f11b795389c71a8a7b81ae29470ccd5de55eb6d6cea39253f90

  • Size

    483KB

  • MD5

    1aee5795c12564f1b3d8a28ad9e7601c

  • SHA1

    bc7403a4c03921491b56d9e486c63b6d15839b20

  • SHA256

    6d70eb078d421f11b795389c71a8a7b81ae29470ccd5de55eb6d6cea39253f90

  • SHA512

    b8ea766328957971df2f99d9b7da350bd372111fee4d915f35e3d87492255e0e732be749f161a8bf127257fedfb392d74f1e4f0876e39520087e83038e6b2b53

  • SSDEEP

    12288:lMr7y90/4GmiGVknNJtlvUmEsKtd/+C9RSdDHPEjJeYl:uyVGEVEjtxFtKtA9NYdl

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1