Extracted

• • Target

    4a5744ba8fe8779bc0e3b8994f065ae807d9558cda4f4d47e3906d01a200f872

  • Size

    481KB

  • MD5

    449d1041969a6b0d1eb4c9a3b7d3b3cc

  • SHA1

    17e0e06bdab2a61a1ed7c1c71cb2dea0917df2f0

  • SHA256

    4a5744ba8fe8779bc0e3b8994f065ae807d9558cda4f4d47e3906d01a200f872

  • SHA512

    0d5ffe7216991553fe3cce8c70317e2e7f1c923d0cebe55fc5ca0141b3ac4f9825bf0013ef63fcfad20b2c38ed4de679f563bd91795c7e2be7972b77133fb058

  • SSDEEP

    12288:3MrWy90bRmkkSjmB1mPFUgqKVPuvQ281cykJdQ:ZyBvB16qKVPv28WyQQ

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1