General
-
Target
8c773b958965d2e426d50cf87705339983d3b80f410b8e61cea3a570aaec826a
-
Size
836KB
-
Sample
241110-d53f4a1rgp
-
MD5
8c2ad2b5689687afad815839c90d26fa
-
SHA1
2d14600ab940789f8fde3e1097775536ba0f8381
-
SHA256
8c773b958965d2e426d50cf87705339983d3b80f410b8e61cea3a570aaec826a
-
SHA512
592309632a0b9fef2e6a508b3902aea5a7a4ab67bb835779e6b1a083cc45497c3b9e1e9613107d8ff61d7116aa19f125b7523f5cb3c07c3798fcf25def3fbad6
-
SSDEEP
24576:6yeXjSw/x5+GN6wYsx0U9QiRmJwUeLs5:BSjSSx536wR07ss
Static task
static1
Behavioral task
behavioral1
Sample
8c773b958965d2e426d50cf87705339983d3b80f410b8e61cea3a570aaec826a.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
gena
193.233.20.30:4125
-
auth_value
93c20961cb6b06b2d5781c212db6201e
Targets
-
-
Target
8c773b958965d2e426d50cf87705339983d3b80f410b8e61cea3a570aaec826a
-
Size
836KB
-
MD5
8c2ad2b5689687afad815839c90d26fa
-
SHA1
2d14600ab940789f8fde3e1097775536ba0f8381
-
SHA256
8c773b958965d2e426d50cf87705339983d3b80f410b8e61cea3a570aaec826a
-
SHA512
592309632a0b9fef2e6a508b3902aea5a7a4ab67bb835779e6b1a083cc45497c3b9e1e9613107d8ff61d7116aa19f125b7523f5cb3c07c3798fcf25def3fbad6
-
SSDEEP
24576:6yeXjSw/x5+GN6wYsx0U9QiRmJwUeLs5:BSjSSx536wR07ss
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1