Extracted

• • Target

    5d766bc84e5b77c37ea7216fb0a6213e165d6ea39e83bec3368b180990330fdd

  • Size

    813KB

  • MD5

    36f8d6ea898d7ef4968930bcf484dde6

  • SHA1

    6fafda2c6bc65c548bdb4e75057ee2a7f2f74c95

  • SHA256

    5d766bc84e5b77c37ea7216fb0a6213e165d6ea39e83bec3368b180990330fdd

  • SHA512

    f09a3a4ba01f64c990ee27bddff4eae1b80ec7cd689d24c665d33ff737f135ef2382a4ef785ae2ff863d9d94fea3e54202e185df25ae7b2a8f80d604e1486d6f

  • SSDEEP

    12288:HMrty906rWkdpJz60D0GSxxZY5HkMMSNdGmKmLgTKqSnUpWmMeVuks0JwIeARmmm:myhZdD0pxGlkMLNZSKST78kVzW3v

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1