Extracted

• • Target

    26e28ff04a3b157bdf374e6f4b82e6f1791226cb2ad7640de1fc8ea9f12f1be7

  • Size

    471KB

  • MD5

    4bb877b2b9df6fbd590e0d02aa3d771e

  • SHA1

    dcf70d5cc5fe4716953894051ffef08ab7aa9e80

  • SHA256

    26e28ff04a3b157bdf374e6f4b82e6f1791226cb2ad7640de1fc8ea9f12f1be7

  • SHA512

    0b9a7c83f6a890da0e2e749d2872b914ab58fab9bce9f11000152fab998fc74b89158da390d84fbc8514f6a3d1b9bcababc11a39d9a0ce7e2d31d9574bb7632c

  • SSDEEP

    12288:LMr5y901BvBLxJgFNPS1RlD9Ah7ITzZDldWT/:myEBDgYlREETNA

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1