Extracted

• • Target

    3a1f604bb6f00fcc12518212df80702401ab7a7f384a0e500217c33ddb815178

  • Size

    481KB

  • MD5

    934284f5e7dc00329e1b3ea4851f011e

  • SHA1

    3ab24ea0c3184a10591406150078c4132b905ca2

  • SHA256

    3a1f604bb6f00fcc12518212df80702401ab7a7f384a0e500217c33ddb815178

  • SHA512

    d78500d3a64328a3c13763f967d1bcd38a98cc23fc3e8b4c4a2b06a672e8b3207762e7ddc35f922c235634eb39391d1d8cf1d64fb4966a43112c490b716b5a6d

  • SSDEEP

    6144:KDy+bnr+2p0yN90QEmnNauPSii5gBXqn5/9Mf2uGD+Q22c8HX/sQT8AIII925:FMr6y90tCU5/k2uHQG8E0IIs25

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1