Extracted

• • Target

    52302254248ed597bc9fd38bda96713ef6aa5780ed1b245b9970b39439bd7016.exe

  • Size

    412KB

  • MD5

    1fc612c5afff6c9193578b957892d87c

  • SHA1

    df474a182d429bafaad7208f591c9a5083ec6fb0

  • SHA256

    52302254248ed597bc9fd38bda96713ef6aa5780ed1b245b9970b39439bd7016

  • SHA512

    85087f594be82c5af04a2324bdb118607b1883c38cd60376a3c3dd02b679400f6950f3701ceeb523344dc64270c099d9131618a48dcecc6f545a65d4002d9e95

  • SSDEEP

    6144:KJy+bnr+Cp0yN90QETLdkmMwbPygrCbjPUSwfr53ljGaG2m9I9+qa/g:bMrGy90Iml6gra3wf1ljGaG2zUV/g

  Score

  10^/10

  healerredlinefuddiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1