Extracted

• • Target

    086669d5a83db3ae0ebb6b6f30e5705569b66127329759fbb577e2aa7fcfefdeN.exe

  • Size

    809KB

  • MD5

    7aba45aab2e89713d1fd993d34ab8ca0

  • SHA1

    8765faff7e623862567faff52727ac2d55389973

  • SHA256

    086669d5a83db3ae0ebb6b6f30e5705569b66127329759fbb577e2aa7fcfefde

  • SHA512

    173c369cfebd9b8be70d30c30b682c620e222ffe4f898e02d4516f4f118e96a718ecc6b817737f06e140b63b6b181940c8a6a3e29bb48a8c27c9d038b7614052

  • SSDEEP

    12288:+Mrey90ZTkpXfIg3Sf7ehF8AwpJap1cPyc4QL1RKQ9ti4gw0o/I/nvCDVXe:Uy1RSfqA9E1cJRL1+4gtFnvWVu

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1