Extracted

• • Target

    124d970f7f2986cdaf53f3b4efbced0f445ff2b7b90aaf1495566bc2a2475ec5.exe

  • Size

    402KB

  • MD5

    9f3b2a350045055a91e69586a4c87bfb

  • SHA1

    7c8f47822fe62069bfdbf923ff43892ac2902e4b

  • SHA256

    124d970f7f2986cdaf53f3b4efbced0f445ff2b7b90aaf1495566bc2a2475ec5

  • SHA512

    c57057dfa9d51c91236ca9f506b3a48fa4e471b5f7fe654f7a84fc059d0b5aba13087db14b2798773ee3cec736de0eb4de0eab116cfb3a0189341c44c0a81ab9

  • SSDEEP

    6144:K9y+bnr+Pp0yN90QElXz/sZAjG77XYef78JidT2CWmSUDk6S3QZaqOyQ2BQ5+C:HMrDy90PlG77YegJidaaIMaqxQ2BxC

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1