Extracted

• • Target

    cd2950930b09eb0b1ce4e33cb525d0c2affc6ff63db9530dd870d57f8c1bbcf1

  • Size

    392KB

  • MD5

    23e489ea6ed1bc577b966c1f17b0efed

  • SHA1

    d10accea488e79b2ae17a8b7f585af40d6dcc8bf

  • SHA256

    cd2950930b09eb0b1ce4e33cb525d0c2affc6ff63db9530dd870d57f8c1bbcf1

  • SHA512

    f085b6d4fc52a392412349fc94162d024bbb3e8055e9ec18476a67deb9f4cf3c96ea0e7e55c6a1d099fe5c14bc3d7f68ddc64d8c5afdc047c8b06bfb77d61947

  • SSDEEP

    6144:Kty+bnr+lp0yN90QEOaLeaUAjviz02E9+zqBbQlbJVeAJT8zl/D4aolh6R:fMr9y90reaUAjY029aQp0zWaR

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1