Extracted

• • Target

    e4295f78ec70b3a82555bd90cd4ba06109d399ddecfc98ef5fde26313001bcc3N.exe

  • Size

    665KB

  • MD5

    a428b37aa1a3efb2f535a9f507053430

  • SHA1

    bf7a9e35177bea83c0e20f5d9df2dfe6832c1093

  • SHA256

    e4295f78ec70b3a82555bd90cd4ba06109d399ddecfc98ef5fde26313001bcc3

  • SHA512

    2049118adab175346b42cad8f46a4ec55d224f8927d4e58270bcd350c99fe768779edc5e9d16a8f3d316b0f5ba580db7da79064eff08c40957d6adf264d857bb

  • SSDEEP

    12288:6Mr1y90DBUbZsAczN53V2mR3pb0p7Zr5aZRwXpZxIjcp1:fyYOsAY3V2Y2p7x5LXpbx

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1