General
-
Target
68037f2037c8d9d797ae2755dcde2149240171e269c5f960ebe1072d367c6a44
-
Size
1.0MB
-
Sample
241104-zkv26szkdj
-
MD5
2f128c47362ea357a13fb83d618c2035
-
SHA1
37efd0f0d5e83ac97cea3553acaa8d2fe45e9c79
-
SHA256
68037f2037c8d9d797ae2755dcde2149240171e269c5f960ebe1072d367c6a44
-
SHA512
a013c37f68d5f339012ef73f850dcfbb6ca805213a44f071ca062bc22d36234a96eccedb763271ea2c1282fb55b5c44d8208aae52476f2bf7ae426cd23b51c64
-
SSDEEP
24576:7qw0OA/oz/04YtRHw/tOWaqbkCimjVkaHtSv8I+h:N0Obw4Yt6OQlimjV3tSvc
Static task
static1
Behavioral task
behavioral1
Sample
68037f2037c8d9d797ae2755dcde2149240171e269c5f960ebe1072d367c6a44.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
68037f2037c8d9d797ae2755dcde2149240171e269c5f960ebe1072d367c6a44.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
68037f2037c8d9d797ae2755dcde2149240171e269c5f960ebe1072d367c6a44
-
Size
1.0MB
-
MD5
2f128c47362ea357a13fb83d618c2035
-
SHA1
37efd0f0d5e83ac97cea3553acaa8d2fe45e9c79
-
SHA256
68037f2037c8d9d797ae2755dcde2149240171e269c5f960ebe1072d367c6a44
-
SHA512
a013c37f68d5f339012ef73f850dcfbb6ca805213a44f071ca062bc22d36234a96eccedb763271ea2c1282fb55b5c44d8208aae52476f2bf7ae426cd23b51c64
-
SSDEEP
24576:7qw0OA/oz/04YtRHw/tOWaqbkCimjVkaHtSv8I+h:N0Obw4Yt6OQlimjV3tSvc
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1