Extracted

• • Target

    33388a2775b4367a2050d77667dbf2b4906077a7c330d320443004b8633f2d86.exe

  • Size

    676KB

  • MD5

    2b37be2846d316fb4870543696d58de8

  • SHA1

    5463df79a4c69793e1f18b96fe8fe9b7eebb971a

  • SHA256

    33388a2775b4367a2050d77667dbf2b4906077a7c330d320443004b8633f2d86

  • SHA512

    3247801bc60867d6e689b190277cb355460f4d2edadec50733d1a43d834d4e8745deb6d4ecbe8be92094f629a1aa8cd4c164020e73726039076aad4703811aea

  • SSDEEP

    12288:nMr9y90I59BqMg0+eoZW5jWhOEft+hUN29/8UiJEWV6zgaY+h:Oyz+BZW9gvl+hUN29/8U7WkzE+h

  Score

  10^/10

  healerredlinegenadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1