Extracted

• • Target
    46fbf52c93b7eed44bd54551eeafc2f7.exe
  • Size 525KB
  • SHA256 bd322d2b194f65294b0dae51486cfa2cd3f2b5b0c9335592501e992535c5ce3b
  • MD5 46fbf52c93b7eed44bd54551eeafc2f7
  • SHA1 95042902b78ab0077506c6c8fbbb356d733f17dd
  • SHA512 9815079e9e0ecfe18193e6ed4c07ec07e8956220c95511c09fcd72e22fb116769528328f2bf8750a28e4acd6a1eb87894d28ef27e8044b2856c3fc78dcaa2c9b
  • SSDEEP 12288:27MxvUQ2PBsNsTtvrHomOd3WShifTJxalXDOVe:27MxvYQATHo73TCxSt
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineandreevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2