Extracted

• • Target

    d8cdfe5c05a8400e7e7e33d7388d8710e4d1e183b17af9f85487bf9e3ee97717

  • Size

    483KB

  • MD5

    9a2ca1c03c5901dbff0efcea7c625da7

  • SHA1

    2461c2dbef22b7f4a7aa4e859fa7edcf0dd2bf95

  • SHA256

    d8cdfe5c05a8400e7e7e33d7388d8710e4d1e183b17af9f85487bf9e3ee97717

  • SHA512

    351872219e79894ec89a171f998de425f0612dcfa8dc219e3a9f11819c917d9b682f47b6a7cbfa2aa3e4d99249646cec040f0be51c4f860458be2c939b41ee4b

  • SSDEEP

    12288:gMroy90IrG6VYFlpnjmrQUc8puGuExT1ueVMZuzVsAsUjczSX:4yZtV4cQI6w1urZuztj2SX

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1