Overview

overview

10

Static

static

3

947d7ce5c9...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    947d7ce5c9057cbf410d77f6f4db07ff1a985dfe25f3075c4782e25fea9627ff

  • Size

    829KB

  • Sample

    241111-c9mqrsvjbj

  • MD5

    21f159cd612112e98e960f56bde36d23

  • SHA1

    bf24443f5d332d85c05ca6862531d7e6ba7ccdeb

  • SHA256

    947d7ce5c9057cbf410d77f6f4db07ff1a985dfe25f3075c4782e25fea9627ff

  • SHA512

    eddf7be3f1143f356d558a099f4dd485006a088b32b60524d57fb9421a753d400f21f153dafa0b899428e26f05d1ec4657e15634ecdc9574192e4ad292a4acfe

  • SSDEEP

    24576:fy/mSn1+wpFQkSMuy09NruWF7WN4xaUzH:q/d1+aFQ9MENru8MU

Score
10/10
healerredlinediscoverydropperevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      947d7ce5c9057cbf410d77f6f4db07ff1a985dfe25f3075c4782e25fea9627ff

    • Size

      829KB

    • MD5

      21f159cd612112e98e960f56bde36d23

    • SHA1

      bf24443f5d332d85c05ca6862531d7e6ba7ccdeb

    • SHA256

      947d7ce5c9057cbf410d77f6f4db07ff1a985dfe25f3075c4782e25fea9627ff

    • SHA512

      eddf7be3f1143f356d558a099f4dd485006a088b32b60524d57fb9421a753d400f21f153dafa0b899428e26f05d1ec4657e15634ecdc9574192e4ad292a4acfe

    • SSDEEP

      24576:fy/mSn1+wpFQkSMuy09NruWF7WN4xaUzH:q/d1+aFQ9MENru8MU

    Score
    10/10
    healerredlinediscoverydropperevasioninfostealerpersistencetrojan

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

      dropperhealer

    • Healer family

      healer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks