Extracted

• • Target

    5a6c84f7f4b552f9942d4516ac0d3dc5f9716d5bef2f9c44823f4e7eaf42daa7N.exe

  • Size

    552KB

  • MD5

    e5684e958d6f3d46ddde4a72df3d38e0

  • SHA1

    967ad5c4c486bad7b102d2e485b58ce80263511b

  • SHA256

    5a6c84f7f4b552f9942d4516ac0d3dc5f9716d5bef2f9c44823f4e7eaf42daa7

  • SHA512

    a187f08c02be9f2b54f83f2e3b73c94bf5b1979b058cd168695873cd617f5a8b89b109e0a281bbd0d4319b113bee83f58916d55462768fc597305dd62731642c

  • SSDEEP

    12288:YMr+y90kVZy72+ztY+0wibcuC0LFtuFsen:Wyu6+ztY+obm0yFPn

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1