Overview

overview

10

Static

static

3

5d3fa46d0f...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d3fa46d0f820e6d372cc4906ee98bad977ffbf40760333a5782b30ceb346b72

  • Size

    560KB

  • Sample

    241104-rln19a1clf

  • MD5

    1a81cfbf1d5c7e5638d5cefc72131547

  • SHA1

    ddc90903618d317fa23fc0fc653353008a7fd303

  • SHA256

    5d3fa46d0f820e6d372cc4906ee98bad977ffbf40760333a5782b30ceb346b72

  • SHA512

    48a0744cffb4aaa59e80e8f0114da6bbaaa040d13aff93b4d0cedb5e4444eec5af21375ab5647f11ee372d03e82a2705e2ecd68619518562773f09cb17be04a4

  • SSDEEP

    12288:sy9043VAsAcwMkGGKaL9hGXWxWAbnkRqg:syQTjKa/hxWALk9

Score
10/10
healerredlinediscoverydropperevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      5d3fa46d0f820e6d372cc4906ee98bad977ffbf40760333a5782b30ceb346b72

    • Size

      560KB

    • MD5

      1a81cfbf1d5c7e5638d5cefc72131547

    • SHA1

      ddc90903618d317fa23fc0fc653353008a7fd303

    • SHA256

      5d3fa46d0f820e6d372cc4906ee98bad977ffbf40760333a5782b30ceb346b72

    • SHA512

      48a0744cffb4aaa59e80e8f0114da6bbaaa040d13aff93b4d0cedb5e4444eec5af21375ab5647f11ee372d03e82a2705e2ecd68619518562773f09cb17be04a4

    • SSDEEP

      12288:sy9043VAsAcwMkGGKaL9hGXWxWAbnkRqg:syQTjKa/hxWALk9

    Score
    10/10
    healerredlinediscoverydropperevasioninfostealerpersistencetrojan

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

      dropperhealer

    • Healer family

      healer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks