Extracted

• • Target

    fcae23a1d4b0c0010ba426364d0ed8eee8d2273f77828137eeb3de145e28aed1

  • Size

    478KB

  • MD5

    786ef597725b9e54d4279c7aa4cb1361

  • SHA1

    b41acc4338e6c93b9c26e116b1e13ead2d812b23

  • SHA256

    fcae23a1d4b0c0010ba426364d0ed8eee8d2273f77828137eeb3de145e28aed1

  • SHA512

    a0ef2a75431adc7a654d371290ec376186441a41a5ae549cd84c1ba6df90b11775c3da3b65ca615695ecb62d04712ccd04790aa3304b365ec5110224110f6fee

  • SSDEEP

    12288:eMrPy90iG5ST596N/dRisF8cq4LMsdKsvecY69VJ3sM8:JyPGo5klZq4L9mJo3R8

  Score

  10^/10

  healerredlinemaxuddiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1