General
-
Target
02584db7fc92315ad896478d4c0ff35e466cdefedc1a1999b3be799c9a0cc80a
-
Size
376KB
-
Sample
241104-zq8kfsxfkn
-
MD5
39a582d78465b9f898bd2e59559d46bf
-
SHA1
9bffe6325f11a3de8767eea08915a92f90cb68ac
-
SHA256
02584db7fc92315ad896478d4c0ff35e466cdefedc1a1999b3be799c9a0cc80a
-
SHA512
081ab41d9e77b17ad2b20fb8456a248d4cae81ae7dfc5ca7750ee37acde876002d7f774a350873217a38928ce630a1e998a0c37f86d0fb8d1801205d0e21d01e
-
SSDEEP
6144:KTy+bnr+Up0yN90QEhSX4HgqRPBYa8KZJLMPGu5d/BJ4eKKHd+mX/0yb:VMrgy90jO4HBBY4J4Pz57CeKKd+e1
Static task
static1
Behavioral task
behavioral1
Sample
02584db7fc92315ad896478d4c0ff35e466cdefedc1a1999b3be799c9a0cc80a.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
02584db7fc92315ad896478d4c0ff35e466cdefedc1a1999b3be799c9a0cc80a
-
Size
376KB
-
MD5
39a582d78465b9f898bd2e59559d46bf
-
SHA1
9bffe6325f11a3de8767eea08915a92f90cb68ac
-
SHA256
02584db7fc92315ad896478d4c0ff35e466cdefedc1a1999b3be799c9a0cc80a
-
SHA512
081ab41d9e77b17ad2b20fb8456a248d4cae81ae7dfc5ca7750ee37acde876002d7f774a350873217a38928ce630a1e998a0c37f86d0fb8d1801205d0e21d01e
-
SSDEEP
6144:KTy+bnr+Up0yN90QEhSX4HgqRPBYa8KZJLMPGu5d/BJ4eKKHd+mX/0yb:VMrgy90jO4HBBY4J4Pz57CeKKd+e1
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1