Overview

overview

10

Static

static

3

d3519b9ceb...c0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3519b9cebe505d310c05990f54fc79c0bf1dbbee63c952ef59f67576f645cc0

  • Size

    966KB

  • Sample

    241104-q1ssbazlht

  • MD5

    0289899e89cf8021db0ffd8da84834c3

  • SHA1

    e3251990e71e80a8b1f1ecc04ca2a1e75659689a

  • SHA256

    d3519b9cebe505d310c05990f54fc79c0bf1dbbee63c952ef59f67576f645cc0

  • SHA512

    ea5dba3cf3926559ba567134396f4e1ca0f34363f59bd1b780aad1d355c4703ba94b257cb23055608547114df822b6c0e1465a95cbce714e576e7dfd5b4adb50

  • SSDEEP

    24576:dyAyWtiFqmZSuSHMSBr9xcStfEeJ5U6k1Gp:4AJiFXY1BYSt8eJ5R

Score
10/10
healerredlinediscoverydropperevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      d3519b9cebe505d310c05990f54fc79c0bf1dbbee63c952ef59f67576f645cc0

    • Size

      966KB

    • MD5

      0289899e89cf8021db0ffd8da84834c3

    • SHA1

      e3251990e71e80a8b1f1ecc04ca2a1e75659689a

    • SHA256

      d3519b9cebe505d310c05990f54fc79c0bf1dbbee63c952ef59f67576f645cc0

    • SHA512

      ea5dba3cf3926559ba567134396f4e1ca0f34363f59bd1b780aad1d355c4703ba94b257cb23055608547114df822b6c0e1465a95cbce714e576e7dfd5b4adb50

    • SSDEEP

      24576:dyAyWtiFqmZSuSHMSBr9xcStfEeJ5U6k1Gp:4AJiFXY1BYSt8eJ5R

    Score
    10/10
    healerredlinediscoverydropperevasioninfostealerpersistencetrojan

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

      dropperhealer

    • Healer family

      healer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks