Extracted

• • Target

    3308a91305c6442e1a25b385eef51d19c20acee77dd33d1ebad4d1fc74dabf6c

  • Size

    793KB

  • MD5

    2e59c9f7841bdb4aca12c31367b5f796

  • SHA1

    53196b8fa606db4ed3232699b4504bf9b435ea56

  • SHA256

    3308a91305c6442e1a25b385eef51d19c20acee77dd33d1ebad4d1fc74dabf6c

  • SHA512

    9e8541140c43a5e61b24ae2a0557249541d9db45e9275af295b084e748a7398243e2a23fd813d510750e46d5d1158dc543550802efb6802604c0d1713085ce1c

  • SSDEEP

    12288:bMrRy90NVpqAEfv/Nsmaybf4wJy0LNxVmhxNWIPwDlP4QKZT/NLg60cBOhpkyD6C:6y6MdH/iWc0JbmXVSWjm6wGlxwspi+O

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1