Extracted

• • Target

    a3b5e22aeb1cafbca939ad31ecce07c99bb87bdab4660146ccb3da5d3087d48d.exe

  • Size

    366KB

  • MD5

    4f638f3a3b80a8a1edaa6e48da09403a

  • SHA1

    46e29ac6af6c1b8d69856d95639194bb5698750a

  • SHA256

    a3b5e22aeb1cafbca939ad31ecce07c99bb87bdab4660146ccb3da5d3087d48d

  • SHA512

    174dc415e7bee36f0886dd713027722871de3c3da82d4c1c906d35712d2e2f76b669c066b47a97b81d910bb05edd2d382cabd2b7ce17230f46d160c2bc5b2cff

  • SSDEEP

    6144:KXy+bnr+pp0yN90QES5EtlkjZHluB4M/iCDT8w+eb+aEHCZm8aCkQivN9f:dMrFy90hQjGF/L3pZWrxPf

  Score

  10^/10

  healerredlinefukiadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1