Extracted

• • Target

    1e46bca17006d0d7f0bf950a660c2a777352e7e77f0fe561ae75aceaf8a9febf

  • Size

    1.2MB

  • MD5

    064bacb620e24a237455bac68f08c949

  • SHA1

    af410d318f0b48ec008aa2305dda473bfffbdbf9

  • SHA256

    1e46bca17006d0d7f0bf950a660c2a777352e7e77f0fe561ae75aceaf8a9febf

  • SHA512

    b6b096188edfffc30fdacb7031030f6e84a41c35e82c02a13b1f33a287f67caf789034d1965395ce21c9c5073d4abe05c35b3eb89ec7a8955da474342dca8ffa

  • SSDEEP

    24576:m+6rGcx+SsQL1Biudmjpq5SEJ4+YLMSItf++HGKt1fTX/ySV8w:m7GcVL1LaMSEJ6gr9++HG4x

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2