Extracted

• • Target

    dab2b7c97f19d3f4062e215a3cbce2a6106523758d90b7299d4ffc7fe619e7edN.exe

  • Size

    524KB

  • MD5

    9bbbe9ecfd65974e80fb62701a1e7e70

  • SHA1

    d37efbf6adf03d5dcc5fd29b1cd9008838c8df1e

  • SHA256

    dab2b7c97f19d3f4062e215a3cbce2a6106523758d90b7299d4ffc7fe619e7ed

  • SHA512

    67c24a9e5ac72da6971b92caad96192e94f9830737d9fad71386e3f1986bbb5b46f2bcdf650ab695d5c1d580a9495be1b8bae44ca70f227c2085fd8bc5e16a6c

  • SSDEEP

    12288:eMrRy90nxDV6r/h7urjuCM/laMNkP6Pat7NwbwT0uoyi:/ykxArOKZdnNXalNwiS5

  Score

  10^/10

  healerredlinerosndiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1