General
-
Target
716d43e61104e36a6f7ba6e4a8ea888169e9fd5b2209adc2504651035ba51cf2
-
Size
1.2MB
-
Sample
241109-ecf8tszkdp
-
MD5
0c2196d229c14114dba9dc1495df3afe
-
SHA1
b9f0e7fff0f2aa94e8b351f5a14cedf36c9e025f
-
SHA256
716d43e61104e36a6f7ba6e4a8ea888169e9fd5b2209adc2504651035ba51cf2
-
SHA512
60b6786f7487746991ffa7a5f1a85ec504ac357d8e25426b19c665fe8013313eea3df70c35e2e35cd0b6582906e1bf8a0fd7ab6c31fef3d492bc55998f149bb8
-
SSDEEP
24576:jCbht9y/vN4jFVkUI4Hiew2ltipvLt87VLLLVxCwaUdw578ObN/4SYrnP4uO:jCz9uyy4Hrw2lt2CxxCwbdw57fQSG
Static task
static1
Behavioral task
behavioral1
Sample
716d43e61104e36a6f7ba6e4a8ea888169e9fd5b2209adc2504651035ba51cf2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
716d43e61104e36a6f7ba6e4a8ea888169e9fd5b2209adc2504651035ba51cf2.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
716d43e61104e36a6f7ba6e4a8ea888169e9fd5b2209adc2504651035ba51cf2
-
Size
1.2MB
-
MD5
0c2196d229c14114dba9dc1495df3afe
-
SHA1
b9f0e7fff0f2aa94e8b351f5a14cedf36c9e025f
-
SHA256
716d43e61104e36a6f7ba6e4a8ea888169e9fd5b2209adc2504651035ba51cf2
-
SHA512
60b6786f7487746991ffa7a5f1a85ec504ac357d8e25426b19c665fe8013313eea3df70c35e2e35cd0b6582906e1bf8a0fd7ab6c31fef3d492bc55998f149bb8
-
SSDEEP
24576:jCbht9y/vN4jFVkUI4Hiew2ltipvLt87VLLLVxCwaUdw578ObN/4SYrnP4uO:jCz9uyy4Hrw2lt2CxxCwbdw57fQSG
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1