Extracted

• • Target

    4a09b6b29388dc994003e657854f11eaf978ebde7913d0290db8003d64543f2d

  • Size

    864KB

  • MD5

    cca4c95a71818e91dc9e3dbe94220a6a

  • SHA1

    eccbe7f31c4af4c1aa7dbdb419f1d7cf3fab4ee3

  • SHA256

    4a09b6b29388dc994003e657854f11eaf978ebde7913d0290db8003d64543f2d

  • SHA512

    f03e921ca3c66f2daf0d909b19a65d7ca665eeb910f288462fc0912e7364dce208a2433b41198ecc257e89343dcf3f274f6a49ea1d7431f3ff9cc001fbdec76e

  • SSDEEP

    24576:uyNwtm4d6baZWmtQQl+4CxOASNnM950o/5TX:9NwtybP9QI4CU3NMvN

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1