Extracted

• • Target

    1c1841c2c7c829cfd67a83cd7968d1f7c649dc07f5cdba9aaed9c777539b630e.exe

  • Size

    380KB

  • MD5

    ae77b12e342a4c54eb04397e0b5e5aaa

  • SHA1

    7ca8173a950192e31194ed0d2abcefe2aa685666

  • SHA256

    1c1841c2c7c829cfd67a83cd7968d1f7c649dc07f5cdba9aaed9c777539b630e

  • SHA512

    66fe44cf30c1c870fbb69143908c1d9be609aa5f6f7dafe53e0b33501af09d9c5069ff082418579b291fd2a4e4180f9fba21e6db1810da7f4ba4ad71a052789d

  • SSDEEP

    6144:Kjy+bnr+ip0yN90QEEYIpE+6AkugoDUBYF9PiAuIroEDDYmKO:tMrGy90OYz5iIka3ZmKO

  Score

  10^/10

  healerredlinefuddiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1