Extracted

• • Target

    a8e859f692671f8d3579abdd1e21086ec4deadd49542ae66dff1d733f6209e84N.exe

  • Size

    677KB

  • MD5

    d2226c5739721a1b10b747e423d69960

  • SHA1

    08367841a8c44e5e6254a0f371890c89b738c3cb

  • SHA256

    a8e859f692671f8d3579abdd1e21086ec4deadd49542ae66dff1d733f6209e84

  • SHA512

    248b7cb67b3e74b9f1db02fcdbeb90ea711267604fdbb55300a463a68d6e30e718f735c5935f32210a5bc735e25241658733e2307a73fd6182a262abecb13e84

  • SSDEEP

    12288:pMrNy90O8pkLfBKLJnP2WJLzIVlGsgADiqFvaoz/8UioEzV6zgaH:wy0pe8P2W1aQsgADiQ/8U+zkz7

  Score

  10^/10

  healerredlinegenadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1