Extracted

• • Target

    997c73cd1e75587de8ddbdbabc4527454f80eb06515efe6f5d8d0bae39e0dfa0.exe

  • Size

    550KB

  • MD5

    ea554d350e4c10fc818e5318067b1972

  • SHA1

    e6d958b493a587240c7ab65c60a0e3e743d9b0f1

  • SHA256

    997c73cd1e75587de8ddbdbabc4527454f80eb06515efe6f5d8d0bae39e0dfa0

  • SHA512

    df24f3a1df125f8f35cf435ca1142c5d3291ec2c5f5f24af87adf25b2251d3c17d1f1b13f3acf77547e9fb112e03121fd858bf9603ebd767ecd430e8c57dfe83

  • SSDEEP

    12288:nMrDy90O3DJfmJxj5kA5n/Fnm8Dyzxi1CPumsM2YveZgs0t:QyV1OJxjH5n9DWxNPumsMFeZ5S

  Score

  10^/10

  healerredlinefuddiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1