Extracted

• • Target

    73be9e7e288795eb2cbe7e15edb2f6a62267042998b7f992fd7393b6f3e02379

  • Size

    693KB

  • MD5

    4d04890151eade4104fe7d0b24fc0acc

  • SHA1

    8a67458a67f8b74e4bfe4c1a6ebebfb34f26c0f9

  • SHA256

    73be9e7e288795eb2cbe7e15edb2f6a62267042998b7f992fd7393b6f3e02379

  • SHA512

    607053dab805e8e6e0fc967e86cf3365f999488760d1e443441be98238885917e290507123d8150020eb360414802d0816ef70dba23ea3eb9df18df24d623945

  • SSDEEP

    12288:RMrAy90tOEkwf6j589pp3K2+It0g0wilcChU5bUJW/K+BJUQiOy8mFQ5XRLJREt5:Fy6OEam9pp3b+It0golDSBUJWn5lYFQW

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1