Extracted

• • Target

    86753a048e711d2b05158742370584cd90688e271e81ab9fe831451f62e06169N.exe

  • Size

    414KB

  • MD5

    bb8bf422a47e5272a4196371b2b5c4b0

  • SHA1

    285c47da150f1b7f6736c50e7636ff659175bc32

  • SHA256

    86753a048e711d2b05158742370584cd90688e271e81ab9fe831451f62e06169

  • SHA512

    7156df5ad28a40aaa61da071ae1c55e7a2f907de868478ba9d5fb12d08904fb9d60533bbcb333ea46198bbb29bf0d99bab5e6eabdabcd390854479c8d2336049

  • SSDEEP

    6144:K4y+bnr+Ip0yN90QE45rZAliGvIxoBNc8bMicCHsA/26HwtLim2QJktdRJVxGifW:UMr0y90MqvIxabDHX/2cNMOdRJVluj

  Score

  10^/10

  healerredlinefuddiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1