Extracted

• • Target

    33e10d42ccb9bc3fd096b7ced7924a63f19f9b60f538f89ae02b0a0016b248d3

  • Size

    478KB

  • MD5

    2765acbbe282fcfe1abcd89607d1a097

  • SHA1

    4aa851c0a0b36ab34cfa96509dd329eb91328c20

  • SHA256

    33e10d42ccb9bc3fd096b7ced7924a63f19f9b60f538f89ae02b0a0016b248d3

  • SHA512

    04d5dc323542b982dc5c128ae53f2b39e8419159cd9aaff16b939deb96fb62e930f6f1d195d78d8c6320cee5ec68a91f8960f3fe81a278a44bd98e9a4c59e494

  • SSDEEP

    12288:QMrdy90yXUwsmvpVkUoa/0b4EtiGO/RhdFLo2NoS:dyPXUmBVkJJEtJV

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1