Extracted

• • Target

    b07b85dcad43a6ec554d4f1c2de7dd67ae73ec34fa2bd295db7dd29ae90f5f36.exe

  • Size

    478KB

  • MD5

    1ee56a32b1338908490778968a08619b

  • SHA1

    0472337f0b40ae3d4e27f8c2d294ba0920fa63b6

  • SHA256

    b07b85dcad43a6ec554d4f1c2de7dd67ae73ec34fa2bd295db7dd29ae90f5f36

  • SHA512

    fbf18f7a00256ee1491e661b876bbce12bcc70bed9c0fd47ac2dfbab18f5afc6f6c6f58d79b8a169aa88bed11571fe8c93dff129b7af7279ffed23c4b12b12e9

  • SSDEEP

    6144:KZy+bnr+Xp0yN90QEFaM2gBY+iX7Z8L4BghdCEK+XvM7urK0aZiqPH/Jwuak+kMm:bMr7y90faJGYp7Z8L4kLsQ1aZ9X2bnm

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1