Extracted

• • Target

    6e4326e2d7c2c22dcc9ce33088c3125c9d4379f03f9d48648b37b3c1f896d765

  • Size

    471KB

  • MD5

    5b48d2ec103a845def5e1ed2e75d854c

  • SHA1

    6e43061c180abc2e1a873933d0b3672b06941969

  • SHA256

    6e4326e2d7c2c22dcc9ce33088c3125c9d4379f03f9d48648b37b3c1f896d765

  • SHA512

    f23a64b1486b21219f1986568838a402015f726588d9c4e16c982e49094eb85ac3a3c8c4cf135bc98ca0c9b857557387039331bca2cf71c966910d4388922b81

  • SSDEEP

    12288:QMr1y90ek1brz5lQe9WLlD9AQcITzODedWP:1ytyXHklRpnTit

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1