Extracted

• • Target

    45599a942dc31f3249e62a37dfb4f860152c6967399b2aba98fda8875a870d8aN.exe

  • Size

    836KB

  • MD5

    c7fa039476c2e4d5ac40f2767e1f5e50

  • SHA1

    9c4e3295e550d5fe39c787b651def1ba1f7e87ed

  • SHA256

    45599a942dc31f3249e62a37dfb4f860152c6967399b2aba98fda8875a870d8a

  • SHA512

    0278564ff1aeaca47d8e6ded69c9d7388eae302d91c98f0cd48ff6f4ea697bf715e266ba9eb2a2f9f4dbc06b494abb4261ea0a33128eab0abc93d5c2f239e188

  • SSDEEP

    12288:+Mrly90kUxZ0VjVshqk3IGBcQsKJbGVHkkz2QFtM2lrwN+13hE2G/iTSzVGNZnD3:byKhqZC8UGdkA2QFtMy53S9iTgV8D3

  Score

  10^/10

  healerredlinegenadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1