Extracted

• • Target

    0eedbce07dd4a842383dfa5ecea7f34d873fd8d7fcf189f092ef3c92d555301c

  • Size

    723KB

  • MD5

    9d3d9f7711c1017ab691ed1fb8339139

  • SHA1

    d6ae949781a5e32eeacf53320ed082b6d4ecd6d0

  • SHA256

    0eedbce07dd4a842383dfa5ecea7f34d873fd8d7fcf189f092ef3c92d555301c

  • SHA512

    d19afd152536b2fb988689c4d0a90d53fa1a0c796284b0f4f83b1a89c93b64fcfd4f555f63efcc4251c31dfc054b675c033703962d9863496a497ad876463218

  • SSDEEP

    12288:zMrmy90mZIDS7H6RS5snVDkoBb3PQgEcuKaHtKCEYA6zqstQojIozhdCF3j7:xy1wS7HBGWA8zZNECEYARstvjIcKF3v

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1