Extracted

• • Target

    f461b222fe1a7c3b751330dff6a28e514a85e40833c5d080c33902d44d07b2ca

  • Size

    406KB

  • MD5

    62af8dca0e9eb78b85fad56d2e74f8e6

  • SHA1

    d72dfabda506feb434372eb58edc5062c1f24f21

  • SHA256

    f461b222fe1a7c3b751330dff6a28e514a85e40833c5d080c33902d44d07b2ca

  • SHA512

    eea06d39db33cd71f9a6c84577d6e9d2d0b2349b5e1943fbfc94d2d30595788dcb6054f2172d9c41b197d1a04ad50064395d48a93b7eab8d03e78b5b0a5314f4

  • SSDEEP

    6144:KLy+bnr+Tp0yN90QE4pM6hNX0GuxQlcZpdCsYqxJfUsRzl5BYUyskOa/XBb7z:hMr7y906p/hNXfYacZpBXRfyzXBj

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1