Extracted

• • Target

    e4147be4b861a2404c7c11f0fe3383898e99d499344c8562de77ec8cd1cd8ef2.exe

  • Size

    1.2MB

  • MD5

    4faeeae54e4617f881888bcaa960df6f

  • SHA1

    e1b51421569b423e10703f7d15d846c12a65f7bb

  • SHA256

    e4147be4b861a2404c7c11f0fe3383898e99d499344c8562de77ec8cd1cd8ef2

  • SHA512

    03364fc2e51eb4164df5be25ac496f26dcefc76a3ada802139ebc41cb3fe1de20cc0e18ce4bc5c1b7a3ce97a13996be5cca782863b0ad47b0fd39df614239bc6

  • SSDEEP

    24576:GyKhjzlmeF0GfvoSZk1VjxZiCECSL3fd9lZfOQksbE0J1z9:V+Hlme7oSy1/ECSL3l9/fOKDPR

  Score

  10^/10

  healerredlinerumfadefense_evasiondiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender DisableAntiSpyware settings

    evasiontrojan

  • Modifies Windows Defender Real-time Protection settings

    defense_evasiontrojan

  • Modifies Windows Defender TamperProtection settings

    evasiontrojan

  • Modifies Windows Defender notification settings

    defense_evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    defense_evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1