Extracted

• • Target

    35a8e0928e586d0f72ebcfeabab21312fd53e689f3d667c6b36f5b5229ddddc8

  • Size

    500KB

  • MD5

    894cecc3c2aad4421c3944244e9d7141

  • SHA1

    a4b5d3ca579dadd46121c2f95eac252d975e11d6

  • SHA256

    35a8e0928e586d0f72ebcfeabab21312fd53e689f3d667c6b36f5b5229ddddc8

  • SHA512

    5ecd8c3470fa17b0c8b068a0c0d32478f50c0508254782e3c5acd639ecf9002e93e443664c924001d31bde68188ad4dfb5a9c5e781fb2072bc7c9e3fb6e6ff41

  • SSDEEP

    6144:Kdy+bnr+ap0yN90QEJOVK02+QA7S08SFlGwGW5zIwCXJpZv06VnbPWYGimHDcXdv:TMrWy907OVpzQA7SxiTGW581NPWm8De

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1