Overview

overview

10

Static

static

3

657bd8865d...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf80151a30e11ea9f7adbb2632bf7545d0e9f934c9c1e856c783a0a44a3c275a

  • Size

    519KB

  • Sample

    241104-q7k12stkbj

  • MD5

    01a00e5bcd9d4da138ef7dc35d43ecc8

  • SHA1

    5c4b9bef28acaa390012c8a4194ce1acc2497a37

  • SHA256

    bf80151a30e11ea9f7adbb2632bf7545d0e9f934c9c1e856c783a0a44a3c275a

  • SHA512

    c3bb9c3bed6bca2a73dbb79560c046a31ac8c5fcc254ca03ae5aa853da6eef3a22f58f1827941f9d4aeb7c8735be6982fe7b7297f462ad82b77e4cafc264f8bc

  • SSDEEP

    12288:vAEB9KpRZ/mOi0a0g6x3Z/DLlu7qzBOUvKiCPhNzC2uua:vAEB9Kpr/liN6rnlGTEKNC2ta

Score
10/10
healerredlinediscoverydropperevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      657bd8865db52c1fc6209c1bdc61986f24081aee6d30d3d36396603ab856afb6.exe

    • Size

      563KB

    • MD5

      baf21529603c01e900cee5ae3dd3ebc4

    • SHA1

      6bd2f89ea18585d5a8d394b741a68bd9a69e659f

    • SHA256

      657bd8865db52c1fc6209c1bdc61986f24081aee6d30d3d36396603ab856afb6

    • SHA512

      c0515e4841df7b2b2068b84de4c49dacd8dd7d2ca4ed9ef2fc2cb37ecd4a12c2430f7e5c0873e295dd47888f90984b4423b4efdd3a25f0419e44210a5600b0bf

    • SSDEEP

      12288:ay90LvvRgYszTkvmI6X4I2ajLyuDMSzbZIBDFl97mGCHP:ay2gc64I2a3yw8RXiGCHP

    Score
    10/10
    healerredlinediscoverydropperevasioninfostealerpersistencetrojan

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

      dropperhealer

    • Healer family

      healer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks