Extracted

• • Target

    524de6f8f308e020feedf2985cc09740_NeikiAnalytics.exe

  • Size

    659KB

  • MD5

    524de6f8f308e020feedf2985cc09740

  • SHA1

    ba598614c3bf3a4bf15b75d419fdee91ff36898e

  • SHA256

    15e02cda02d7fe57c75ba5547dad1948b5efa35b43b18fb96c24384404396454

  • SHA512

    3274a41d9a1382869667cbf4a12408665e4ff966849ec7fae6fd917fb142c6d13c6037fc3789f55353629b8dec8ea92718cc2e50238aac510aa8d653152f3e3f

  • SSDEEP

    12288:4Xdy90g1GuDGsheu6Qnjrxh3KsnYVAgoOWw6nDooysb/Vmo8MP0s:+y/GyRPJjrpHJzDuszVT8M9

  Score

  10^/10

  healerredlineharesdropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1