Extracted

• • Target

    0d0e7ca89c86838b73a273253ba51f10_NeikiAnalytics.exe

  • Size

    552KB

  • MD5

    0d0e7ca89c86838b73a273253ba51f10

  • SHA1

    78df80c4687451e3ae52c620dc0623398c837be2

  • SHA256

    3b681afcaf9365eb94da64a4454a9aee2e929e7fb6fd476116f720ca7442d092

  • SHA512

    937a2530648dd7f6b524c4ba1e9c3f9dc3a82be7b678285826c0223236e81e1df9b5dc55a044abc4309ac6f24279ce0eb1e480121e56fce063b8b26dce06454d

  • SSDEEP

    12288:YMruy90Eq5Ryh/MI50irANYlK1ddzJr2HZVPAaawSSu/:myX1Rco0dzqtLawC

  Score

  10^/10

  healerredlinenormdropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1