Extracted

• • Target

    7624d23f2c4b991ced568222d33d3632476b6ec9c0641f5d3b324124159f9753

  • Size

    478KB

  • MD5

    40df91ee8d419bf6caf18feabbc89770

  • SHA1

    3a7b9e540d4a77e7fc646ca6fc11a3925c139dad

  • SHA256

    7624d23f2c4b991ced568222d33d3632476b6ec9c0641f5d3b324124159f9753

  • SHA512

    096741e61de255c0a72bd3acbeecd728ee5537112d8fbd2db8666ff4020cc320bb4693b7096a15735b55e926638c16145ce335e540ea3fc58758c7fd1389e61b

  • SSDEEP

    12288:HMrsy9071YmVHLtNSE1zx2At5lxkt0AZ+AASa6:HyA1vVHRAczUClePdY6

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1