Extracted

• • Target

    10d29bf0e23526ebb6aefbb1c684a65da7735b43ea97f85107f119b169f569ee

  • Size

    874KB

  • MD5

    d7a769c97ed2e5a5799837e981201380

  • SHA1

    489ddf4452522a003af2a32256824aeadee85e3f

  • SHA256

    10d29bf0e23526ebb6aefbb1c684a65da7735b43ea97f85107f119b169f569ee

  • SHA512

    43f5337c8bf1bd49efe5bc6d7a252b195cb7cfbc84498f3ceab6b4478b20da1f1e59b0508ad3291e45a46beaf560a2f103d04ca6354b34994f62fa367c979e04

  • SSDEEP

    12288:yMrty90t3z6QUfnpTga7y/ZbXadvbjjL7rgkegs6lmJXjCOXuQxSSKs/J0mLWWb+:HyqDYfnpoxbXaFbzCSmgGuUBHLT9E

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1