Overview

overview

10

Static

static

3

70fa29931e...dd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70fa29931ece3e4d6ec97ef66c69cd821360c7a197e533d6d42627dedc79efdd

  • Size

    936KB

  • Sample

    241111-bejj7aslck

  • MD5

    cfacbcea3dda8c8413524ff1ce975294

  • SHA1

    4113be12197294ee7db46e2d7999061d621c630f

  • SHA256

    70fa29931ece3e4d6ec97ef66c69cd821360c7a197e533d6d42627dedc79efdd

  • SHA512

    287cbeb549642b62936df05ca8e2aa9d8fe78a891b9330c33fc6c96f4d5add6b3ecf44928441896b0e642a12ea1d8fa6c2c26a12ae64032b5f8ba4360fe74156

  • SSDEEP

    24576:CylFWnVc202mp8v/oHfzYiDaPKDx0yr5Tj:plEnO/18Ir7Dau2

Score
10/10
healerredlinediscoverydropperevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      70fa29931ece3e4d6ec97ef66c69cd821360c7a197e533d6d42627dedc79efdd

    • Size

      936KB

    • MD5

      cfacbcea3dda8c8413524ff1ce975294

    • SHA1

      4113be12197294ee7db46e2d7999061d621c630f

    • SHA256

      70fa29931ece3e4d6ec97ef66c69cd821360c7a197e533d6d42627dedc79efdd

    • SHA512

      287cbeb549642b62936df05ca8e2aa9d8fe78a891b9330c33fc6c96f4d5add6b3ecf44928441896b0e642a12ea1d8fa6c2c26a12ae64032b5f8ba4360fe74156

    • SSDEEP

      24576:CylFWnVc202mp8v/oHfzYiDaPKDx0yr5Tj:plEnO/18Ir7Dau2

    Score
    10/10
    healerredlinediscoverydropperevasioninfostealerpersistencetrojan

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

      dropperhealer

    • Healer family

      healer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks