General
-
Target
7558bea70c3f10655819b8910119316eac6e21e23ff1314a898ac6965d5bb405
-
Size
1.0MB
-
Sample
241111-gptqssxpej
-
MD5
6959d8eddde13b5ebd5614dccdd52157
-
SHA1
e0a7d9566283dae5ab66e3b0a2c61601c8af7646
-
SHA256
7558bea70c3f10655819b8910119316eac6e21e23ff1314a898ac6965d5bb405
-
SHA512
e02e6b1609c65d23988db4d8f1ac770da7eea260c024b90e1b86d8387574ecc7b5b6c8eb543d0f664f1f30368f4de60200d2a47e474249a9ea63a526a9167d75
-
SSDEEP
24576:Jy240CzeczKkccWUoyDwVKDCOHVbuy3Jc1RlZlu5uU:82PCajBcg5oDC9+m7lZlH
Static task
static1
Behavioral task
behavioral1
Sample
7558bea70c3f10655819b8910119316eac6e21e23ff1314a898ac6965d5bb405.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
7558bea70c3f10655819b8910119316eac6e21e23ff1314a898ac6965d5bb405
-
Size
1.0MB
-
MD5
6959d8eddde13b5ebd5614dccdd52157
-
SHA1
e0a7d9566283dae5ab66e3b0a2c61601c8af7646
-
SHA256
7558bea70c3f10655819b8910119316eac6e21e23ff1314a898ac6965d5bb405
-
SHA512
e02e6b1609c65d23988db4d8f1ac770da7eea260c024b90e1b86d8387574ecc7b5b6c8eb543d0f664f1f30368f4de60200d2a47e474249a9ea63a526a9167d75
-
SSDEEP
24576:Jy240CzeczKkccWUoyDwVKDCOHVbuy3Jc1RlZlu5uU:82PCajBcg5oDC9+m7lZlH
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1