Extracted

• • Target

    423e1ee9cd3b3839760aa15463a89e9d3e09f8de5451578bc6e78d9163fdd0fc

  • Size

    864KB

  • MD5

    20865d3a0adb691d7c976f38e21f8bcb

  • SHA1

    ba1889b20500391f7cf155deac685f5c9fffd631

  • SHA256

    423e1ee9cd3b3839760aa15463a89e9d3e09f8de5451578bc6e78d9163fdd0fc

  • SHA512

    6993a72afa017909bbdfc41bc6ff1c1151894292439c4e6b4da400e57ddf53e48ec71520b375d9890c9b4758dbbb25fd40c0318e62be1f5856b2d3540cc0aed6

  • SSDEEP

    12288:eMr6y90fZf5sQz93REj9YCtqWeDty4+tSDFFwD9F2+AA8FGkSCuHKQ9MSyxEnh:Uy85/zA5xt12y4+YbQ9F2ZzFGkRuBdh

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1