General
-
Target
24c8c4215809438956aa2fcdfa0eca28aba0325a18a2222df4a8a032b90f9d60
-
Size
1.5MB
-
Sample
241110-cg6ceaznam
-
MD5
f41921691e0f83d4ba3ea1dc320cb45c
-
SHA1
8ea2e955b348b65ceea7b47dc9f3514752d9f2e3
-
SHA256
24c8c4215809438956aa2fcdfa0eca28aba0325a18a2222df4a8a032b90f9d60
-
SHA512
7511417071d9a1a50375cd91503db82e75a8226f03faea9f60f8b0842d801ef0106afcc160f88a0563c8eed221ece535d059d04ebb4ddfdb64dffbff66565c5d
-
SSDEEP
49152:4vw8hVfTkyoVa0McqYmESINqecsorgqc:qw8jIyoo0MvPEmzsoQ
Static task
static1
Behavioral task
behavioral1
Sample
24c8c4215809438956aa2fcdfa0eca28aba0325a18a2222df4a8a032b90f9d60.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
24c8c4215809438956aa2fcdfa0eca28aba0325a18a2222df4a8a032b90f9d60
-
Size
1.5MB
-
MD5
f41921691e0f83d4ba3ea1dc320cb45c
-
SHA1
8ea2e955b348b65ceea7b47dc9f3514752d9f2e3
-
SHA256
24c8c4215809438956aa2fcdfa0eca28aba0325a18a2222df4a8a032b90f9d60
-
SHA512
7511417071d9a1a50375cd91503db82e75a8226f03faea9f60f8b0842d801ef0106afcc160f88a0563c8eed221ece535d059d04ebb4ddfdb64dffbff66565c5d
-
SSDEEP
49152:4vw8hVfTkyoVa0McqYmESINqecsorgqc:qw8jIyoo0MvPEmzsoQ
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1