Extracted

• • Target

    fef1f839af0b4e69b783c182ffadfe0dd83e431ff5b463682def94cf47cecd1fN.exe

  • Size

    864KB

  • MD5

    76e204add0c3b50bf5259f279a92ce10

  • SHA1

    446c2e1abb47007359cd60c20b4d669ba62cf3d0

  • SHA256

    fef1f839af0b4e69b783c182ffadfe0dd83e431ff5b463682def94cf47cecd1f

  • SHA512

    4fccbfcd0b96fec6539744da832c664633b39b6bda3e79ec49cedd895c105b77d1a0cf12000aacbb59a36e8a88d1223c7629abdd29141c39607f9af414463100

  • SSDEEP

    12288:oMrly90dhGv6VyjyTdURtQHvnG9qw8zidj1h0cUjwERu/KSuv1F6bfeKOu:ty4h+6Vp+mnxJUXewERGKSuX6Au

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1