General
-
Target
d1c12837bbf27bc1d517402b771c568b4775624756d911cda2be4f636189a791
-
Size
1.2MB
-
Sample
241109-xlwc8azfkm
-
MD5
96bc5e7afc25042612fbbfd8af04510f
-
SHA1
c292e14a85f313d5a4141c874d73ee66efc20359
-
SHA256
d1c12837bbf27bc1d517402b771c568b4775624756d911cda2be4f636189a791
-
SHA512
e637699890f3dcfd705f0442a2910eef045321a2288b73c80099cd2dee2bcd4aadd1bf9ab8da91fd715f75fbdb7769bb7b19c768149619b5779fc09bd181044c
-
SSDEEP
24576:nO/ma41pNBrquMHuDpKqJUd5xYsLo11YdH/tFrQhldU8HJVYx+dblqaWSLO:nOXedEODpKqJGYsLMutFEIx257
Static task
static1
Behavioral task
behavioral1
Sample
d1c12837bbf27bc1d517402b771c568b4775624756d911cda2be4f636189a791.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1c12837bbf27bc1d517402b771c568b4775624756d911cda2be4f636189a791.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
d1c12837bbf27bc1d517402b771c568b4775624756d911cda2be4f636189a791
-
Size
1.2MB
-
MD5
96bc5e7afc25042612fbbfd8af04510f
-
SHA1
c292e14a85f313d5a4141c874d73ee66efc20359
-
SHA256
d1c12837bbf27bc1d517402b771c568b4775624756d911cda2be4f636189a791
-
SHA512
e637699890f3dcfd705f0442a2910eef045321a2288b73c80099cd2dee2bcd4aadd1bf9ab8da91fd715f75fbdb7769bb7b19c768149619b5779fc09bd181044c
-
SSDEEP
24576:nO/ma41pNBrquMHuDpKqJUd5xYsLo11YdH/tFrQhldU8HJVYx+dblqaWSLO:nOXedEODpKqJGYsLMutFEIx257
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1