Overview

overview

10

Static

static

3

b46c06ef22...a7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b46c06ef225e7cdec3b9977ab77a23259ce2e4fb225b418ab124d0480ca2bea7.exe

  • Size

    1.2MB

  • Sample

    241118-qxhg6sxelb

  • MD5

    b40ae8a5bee3c12ee419be3e8d49d028

  • SHA1

    1de925549d8fd2a7be02a9d8be141c2762832845

  • SHA256

    b46c06ef225e7cdec3b9977ab77a23259ce2e4fb225b418ab124d0480ca2bea7

  • SHA512

    ecba095d8c1cccdacd251b0a1b38801cdece5adeb9362d83b35fa4e5b96e4a1f7fa5c4fbbcdfe2e8f15de2ef74da3c8340e2269b12df2cd405f7014dc712e4e6

  • SSDEEP

    24576:hygCTN3NWwdaHjRUoQA+YXapFaEQRh/8gs5iw0QjepezaKMzncGPj/:UgaNIwdQjRUHA+mDEsh/8gqZewzGznBL

Score
10/10
healerredlinediscoverydropperevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      b46c06ef225e7cdec3b9977ab77a23259ce2e4fb225b418ab124d0480ca2bea7.exe

    • Size

      1.2MB

    • MD5

      b40ae8a5bee3c12ee419be3e8d49d028

    • SHA1

      1de925549d8fd2a7be02a9d8be141c2762832845

    • SHA256

      b46c06ef225e7cdec3b9977ab77a23259ce2e4fb225b418ab124d0480ca2bea7

    • SHA512

      ecba095d8c1cccdacd251b0a1b38801cdece5adeb9362d83b35fa4e5b96e4a1f7fa5c4fbbcdfe2e8f15de2ef74da3c8340e2269b12df2cd405f7014dc712e4e6

    • SSDEEP

      24576:hygCTN3NWwdaHjRUoQA+YXapFaEQRh/8gs5iw0QjepezaKMzncGPj/:UgaNIwdQjRUHA+mDEsh/8gqZewzGznBL

    Score
    10/10
    healerredlinediscoverydropperevasioninfostealerpersistencetrojan

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

      dropperhealer

    • Healer family

      healer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks