Extracted

• • Target

    2fb51143d88027fb008d121341aac56d7345e0b0492e97cd72c79f048aa01bd8

  • Size

    861KB

  • MD5

    a5b9b95dbe023aebdcdd4a907a2818f4

  • SHA1

    e5e516534321b334449c6ca2472a47d3b4a34696

  • SHA256

    2fb51143d88027fb008d121341aac56d7345e0b0492e97cd72c79f048aa01bd8

  • SHA512

    56afb099b3d5d05b3e5837489ac86eeb8b283aa89d9da5c734e214d0a555ef72ee0a539187589fa49bd778f04f5274b430f32dd46ecc948fa34a9e7f6fdd42e5

  • SSDEEP

    24576:yyU+LV/UkpPehiEUO2uwmNH21fmfPnon0Icv:ZU+5rPoijOtwmB2R6onfc

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1