General
-
Target
4b6a6bca9eb13544618f8dfd9b61318df310670ae05e1d05c8b0a673cad221e5
-
Size
747KB
-
Sample
241109-d627qawhnf
-
MD5
eb04b96e9a668c71e3b49452da53935b
-
SHA1
884db8a6ac1607aa7cbf807491dabb3c6e24a693
-
SHA256
4b6a6bca9eb13544618f8dfd9b61318df310670ae05e1d05c8b0a673cad221e5
-
SHA512
cd3893a60fbe2e209a0489e0eabc23388fcaa784154286058b35b8f51433b026985949550152e134cecc953435aa347c8efc8a069987ddb3bda4088e9b95d3f1
-
SSDEEP
12288:ty90T4o9/zTJJjzRp9fuC4S4ZMVNpdqqJrpnhyMTN5g5JvZIsRlebo4wF6qA9Ilg:tyCJVzjzRfW/udZ7FJ5WvZfkboZFvg
Static task
static1
Behavioral task
behavioral1
Sample
4b6a6bca9eb13544618f8dfd9b61318df310670ae05e1d05c8b0a673cad221e5.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
4b6a6bca9eb13544618f8dfd9b61318df310670ae05e1d05c8b0a673cad221e5
-
Size
747KB
-
MD5
eb04b96e9a668c71e3b49452da53935b
-
SHA1
884db8a6ac1607aa7cbf807491dabb3c6e24a693
-
SHA256
4b6a6bca9eb13544618f8dfd9b61318df310670ae05e1d05c8b0a673cad221e5
-
SHA512
cd3893a60fbe2e209a0489e0eabc23388fcaa784154286058b35b8f51433b026985949550152e134cecc953435aa347c8efc8a069987ddb3bda4088e9b95d3f1
-
SSDEEP
12288:ty90T4o9/zTJJjzRp9fuC4S4ZMVNpdqqJrpnhyMTN5g5JvZIsRlebo4wF6qA9Ilg:tyCJVzjzRfW/udZ7FJ5WvZfkboZFvg
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1