Extracted

• • Target

    23547efe8bffd9f0d9b1baab4d9fa4f9c615be1f3b3223f45fa1cbfa6e997335.exe

  • Size

    644KB

  • MD5

    7166dc838dc38ed47eecd53c920ad9e6

  • SHA1

    4435c3ab3743604cb21576ae062f6f8955b09e09

  • SHA256

    23547efe8bffd9f0d9b1baab4d9fa4f9c615be1f3b3223f45fa1cbfa6e997335

  • SHA512

    273b1ab2373bb93442e83013118b0a6ece84b248fb4cff964aabd6488cc0d3689689e8a1bba0472ed444930d5e225fd8fbe4407d69c0aab7779d2c376b07c310

  • SSDEEP

    12288:SMrBy90NNQnu+qHggW6Wl6ESPamUK/ZUpdvlLOgUTMEEO4l:ry1nufTWO6mUK/ZmLOdEO4l

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1