Extracted

• • Target

    c79df91fe2ef8dec810f82911fdc27c16a445d216fc3fdb3e1799a076dd9074b

  • Size

    810KB

  • MD5

    fdc9d7c429ad9ccb25a5e94f3fe393e3

  • SHA1

    e6f4bf483ae476e524154f7dfb369ece7ef94cd5

  • SHA256

    c79df91fe2ef8dec810f82911fdc27c16a445d216fc3fdb3e1799a076dd9074b

  • SHA512

    5af49da080ce5d2faa8ac5f654ca53f77a264cb8db2a1512ed15235b77aeedcfde516185df99a15acb7cda74f41d6e43377387a1f93a975cd64dc0cf62c1f0e5

  • SSDEEP

    24576:Qyx52CNq03gs+FeO443WiKOqLOUh0QZAt0m:Xx51+s+F0431Kz0QZy

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1