Extracted

• • Target

    81e74efd9041dd8c6ea971a2f46ad4efb63faa50385dc8a9ccaab543a1b21d0a

  • Size

    536KB

  • MD5

    4a0ca363d57a0a2f0322781b116a8c67

  • SHA1

    17bd8191359042806f5950370ead48a11a7abf50

  • SHA256

    81e74efd9041dd8c6ea971a2f46ad4efb63faa50385dc8a9ccaab543a1b21d0a

  • SHA512

    c2446f868cd01decb397423ea6f678ecab0b13f214911bcc111ca96d1e8128406544a593cc6c87535e80fb6cd15fd8ace60b5bcb68aebeae6d224c19683b20e0

  • SSDEEP

    12288:6MrJy90AxlyKMEq1Eo4LcCwJtx/uKdqC/n7ydYiwko:jydyKMB1MICwJv/uSqi7iwko

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1