Extracted

• • Target

    cc56b586068b19146c918031acee322cf692dd552624bc441b6a69cf7edf268aN

  • Size

    546KB

  • MD5

    8935f6cb9629a6327caa428e235f0d10

  • SHA1

    b657e06ce1e0938bdddfbebe2047628df8651da5

  • SHA256

    cc56b586068b19146c918031acee322cf692dd552624bc441b6a69cf7edf268a

  • SHA512

    6e4839bb4eb96172bea1483a36e36177046e5d1578bfb16bf51bb6b9cba3412e4f24dba8f749bea059794a93d3e6d39b7f8c4f007d7cee1671485599ef6ce73c

  • SSDEEP

    12288:/Mrey90o5IcLyJgDkyPfC5ksYeCJidavIEaqAE2B+thwK:JyJ5TyIkyPfC3huvIEaqAjAtp

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1