Extracted

• • Target

    d0aa4347c1b7a5a80bd5e5acff100491b5ec8371ae5a8e47ed2e3de091a84d5e

  • Size

    471KB

  • MD5

    22c28b5130df09a04915615b93f148be

  • SHA1

    ae5818788708adea4c53d8bf2c13a6477d5b6e01

  • SHA256

    d0aa4347c1b7a5a80bd5e5acff100491b5ec8371ae5a8e47ed2e3de091a84d5e

  • SHA512

    983051738b5cfb82c7fcadf5be2ea793c337ccb10c113be9f388e8e4c58bfe652eb2898993fd016182301554194fede3dde7a6cc7ac9fe8b74a104fdb82301b6

  • SSDEEP

    12288:uMrey90F5bacV2UOvweiI8XHEWtDdUjccSrqj:AyNrZvweiIy1Ccjqj

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1