Extracted

• • Target

    073c5ab777d1c89f28a3c49318d671ae275609dea6a72050bec90577caf0d12c

  • Size

    577KB

  • MD5

    df4fcdac0a5b4749b652399d670251dc

  • SHA1

    c11c7ad81e8dd16bb2b6321364d7b00a1d716d69

  • SHA256

    073c5ab777d1c89f28a3c49318d671ae275609dea6a72050bec90577caf0d12c

  • SHA512

    b2555cff5c469d0addbe9902f521c9d6b6746757beaadfa213fe61840005b5f7cec2dc1bf803838a04bb2c6fed0efae56ce19f6038afbf0d63482df1dd263fed

  • SSDEEP

    12288:RMr4y90Rahimz7AuxqVLxFYn54YgCiA6QBoNrSfz:xyksVAuxYLIXgK6QBopSfz

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1