Extracted

• • Target

    20e20a7adb08e734c12de3bbce7fa0f9407d6fa514fac09abd8e38810d341b12

  • Size

    478KB

  • MD5

    26d4d605689110fcc1dfc265269571fd

  • SHA1

    7a08c6207b37e7d973cb8aab5a93734d99570931

  • SHA256

    20e20a7adb08e734c12de3bbce7fa0f9407d6fa514fac09abd8e38810d341b12

  • SHA512

    598a800235d7aa105abc289ed6bf11bd15612efcac69e7c8688c3ebdd1f95120eebd135195b4135c1f4793cefb040928d514ddfd0632b3e771111cfc9ecd66b0

  • SSDEEP

    6144:Kiy+bnr+cp0yN90QEgDgh0Hjdlju4c2+ynJIq4FWv6ykMtG/m6/RY4xsZJHCphqX:uMr0y90uDgaDdlj5f3vsGmY4xQHus5

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1