Extracted

• • Target

    5ae2774ab66df706ccbba3ac0576751d4453fc3386795cde8ae058dbeceae112

  • Size

    694KB

  • MD5

    5986aa74cdd3d29d866c40eb0d3d799b

  • SHA1

    ba1cd2d5e0a2c0646150e21a9b250ac324938d54

  • SHA256

    5ae2774ab66df706ccbba3ac0576751d4453fc3386795cde8ae058dbeceae112

  • SHA512

    60b70c664a27ed090b283ef35993173d3b6b4729af6ec8ad1776116a29ff57b1491dda6abc12c07776ee1b79f7391cacf1a536e10194c9517f55dc81478134a5

  • SSDEEP

    12288:/MrRy905soyPcZh0a9usV/cC49/zGgHzRNCHBKSIqkRgBVa8:my1oYcX0a9us9cC4p19P2o8

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1