Extracted

• • Target

    76aa814e285c8557de9ad823b94f2eb9c87e98151f1ad4136553a22e7cdcf841

  • Size

    500KB

  • MD5

    f772c1f6f744198cd1b8777e41d7fa7d

  • SHA1

    f9b22c9ced7153f2136c7a2ca4e5fd83e79671b3

  • SHA256

    76aa814e285c8557de9ad823b94f2eb9c87e98151f1ad4136553a22e7cdcf841

  • SHA512

    b1fa8e9bf7663b19d2017513fa6910a4b7713797e42270747f4984f13a5e95baf2e0cf86abcad75b070f465fbc84a881d801cd6411cea1ab90ee5f5a381afee5

  • SSDEEP

    12288:0Mr6y90nA0TaoYtomMdWhvKsNs9YEXHEA:+ylYAoDgCOEXHp

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1