Extracted

• • Target

    77a4de667f3d1f7a6d392c387fdf5224f28a94a82c20c72e264ecffff5a01a26

  • Size

    1.2MB

  • MD5

    46498741d554519a5bb133d2e4983ac6

  • SHA1

    d7185024a650dfe4c4304fc2a5ae5cd3cc32dd03

  • SHA256

    77a4de667f3d1f7a6d392c387fdf5224f28a94a82c20c72e264ecffff5a01a26

  • SHA512

    de0240612df45d95f927784bc34f1c8e64a77736bfa96e757b40293bbcdedfe03ec266e1a4a72e45f7a10d9785087e65e8f5fb1c6dcbad7fd3135c040093be7b

  • SSDEEP

    24576:mgcL02I4/sr0X8KvEjUS3/XxExcPXxp2eCEpH:mgcL02Ix2SPX2+PX8

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2