Extracted

• • Target

    e53211d2a16134493491a51c651216136f692678bb87d9f5d445dde06cb09f43.exe

  • Size

    375KB

  • MD5

    a81e8c31e5e3962fe06ea7eb2b2c6cf9

  • SHA1

    d6aab69cc9d26524ac9a39e1386e81f22d6dce41

  • SHA256

    e53211d2a16134493491a51c651216136f692678bb87d9f5d445dde06cb09f43

  • SHA512

    6d26bea4cff094694c47d90651719f0acc3cf5b11e468f450bc4dc61f81fb9a73318be61a7523e11e6a9447339573f932389d6a7015c2670e60fb20d4092f87c

  • SSDEEP

    6144:Kmy+bnr+Up0yN90QEpNA4CWpDj/Ej/FFYCvIenrwlDqorItHLUCseXXcuDq:iMroy90bN1CWFsjhz+qorgHACsgXHDq

  Score

  10^/10

  healerredlinedubkadiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1