General
-
Target
a6aa77848b11aeb3ba621aead7772051114206c61a877f021d37656414530cf3
-
Size
1.0MB
-
Sample
241109-d5nb6swhld
-
MD5
f44034bf60c6f452f3de106ff1ba8b7f
-
SHA1
c1be63cbb934f0f6c415276f546c40416e2a8953
-
SHA256
a6aa77848b11aeb3ba621aead7772051114206c61a877f021d37656414530cf3
-
SHA512
c05da857d307ff6cb931e0d7ad1996902c95f226465f1bc56981d5b8e438178bfb3fb6aade5d9df5c4eff2a0fbaf9798aed356ec29ab5d27d6ae7a6015e979f6
-
SSDEEP
24576:DCAYkSvuevX2o0Kjm4BNQyv39+v19w6NpkH+RQ0R4owkPiyFG7HEK:bStvX2ozjm4HFv3M0ckH+RocjFG
Static task
static1
Behavioral task
behavioral1
Sample
a6aa77848b11aeb3ba621aead7772051114206c61a877f021d37656414530cf3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a6aa77848b11aeb3ba621aead7772051114206c61a877f021d37656414530cf3.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
a6aa77848b11aeb3ba621aead7772051114206c61a877f021d37656414530cf3
-
Size
1.0MB
-
MD5
f44034bf60c6f452f3de106ff1ba8b7f
-
SHA1
c1be63cbb934f0f6c415276f546c40416e2a8953
-
SHA256
a6aa77848b11aeb3ba621aead7772051114206c61a877f021d37656414530cf3
-
SHA512
c05da857d307ff6cb931e0d7ad1996902c95f226465f1bc56981d5b8e438178bfb3fb6aade5d9df5c4eff2a0fbaf9798aed356ec29ab5d27d6ae7a6015e979f6
-
SSDEEP
24576:DCAYkSvuevX2o0Kjm4BNQyv39+v19w6NpkH+RQ0R4owkPiyFG7HEK:bStvX2ozjm4HFv3M0ckH+RocjFG
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1