Extracted

• • Target

    08a6913c04d2bf8e94186dc94b27ce74f6b6fcc7e8552d56a51b17d9647b0402

  • Size

    484KB

  • MD5

    e2dd34157ed0dba3f1be7f82bc10336b

  • SHA1

    7eaa6e588e00c21b7eccb8f2bd96bf7d8da66bab

  • SHA256

    08a6913c04d2bf8e94186dc94b27ce74f6b6fcc7e8552d56a51b17d9647b0402

  • SHA512

    be468243b6fd949b3f2d4baa5f4e21793405c0a43c0ffa0bc806d6ec798d08e2ead7155d8c15e7abab28faf9a465efa5874da322b29192037ac72523e37d1955

  • SSDEEP

    12288:qMrZy90n2Ot0VDdBlKfGKC6P5uBypICkT9SeF:fyQOVBBMfGn6R/pIr

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1