Extracted

• • Target

    46ce97acfe1281b40583722c798496b6736dec3301e65613487ea5ad9e6ad817

  • Size

    793KB

  • MD5

    3bd2e648198b1f2a9a50c5fd035e0860

  • SHA1

    914753cac6d417b7e24f8f3008599f02ae96c9d6

  • SHA256

    46ce97acfe1281b40583722c798496b6736dec3301e65613487ea5ad9e6ad817

  • SHA512

    0af5b9076b1b6242e53630f1857dfae36087ab6c60fa37fca196baf6d610ac8c5184fdad2dcb3f1cca86a75e14d777b76c10a5b33f38c6c0ed50298f935ab280

  • SSDEEP

    12288:/Mrhy908JOOer8uQkVQc56pHLZpag/uu3SHu5VPuiQDa08I:uyHJO1PQyJgV/uwS4r9JI

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1