Extracted

• • Target

    388baa2cb8993119e5ddea3d9ddb72eb2c7b31d788bdc3e8a834c3286de95461

  • Size

    644KB

  • MD5

    6ebde574d34069672f948119d44c340b

  • SHA1

    18a2fdb36076cca2a605848b0f4d2815b2dd1a70

  • SHA256

    388baa2cb8993119e5ddea3d9ddb72eb2c7b31d788bdc3e8a834c3286de95461

  • SHA512

    d6370246e0650ed7097a55a209312e1e6a7edd095eb731784bced3c6cb445d3df8cf3468821bf7948ad21b179e11e9d94b3d103cb6c5cd57c3434bd136d9e38a

  • SSDEEP

    12288:HMrJy90rRiimqgPb1RbyRG8x52UEhGa/dZC2p/ZUT7vl9FrjVsRhTS:ayeRiifSb1EG8xEUeX/dZx/Z+9FrjVWE

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1