Overview

overview

10

Static

static

3

6882ae8ca3...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6882ae8ca31412dab6e49fcbf028349f26711e3d8f4e9c171e4115b1c31e956fN.exe

  • Size

    623KB

  • Sample

    241119-aa131axeqf

  • MD5

    b6c7d19630e091aae08ab1852d8ea960

  • SHA1

    f97bd8cf75f6cb080c7e0faeb09d6c2df7f8dd05

  • SHA256

    6882ae8ca31412dab6e49fcbf028349f26711e3d8f4e9c171e4115b1c31e956f

  • SHA512

    b35addb848616b9c7959569b80f6a3db09e4062e902e807a8e343777795216d60a69144da5588452116e982bee9861c7b9a79c604758b8da0481788b0a60b8e7

  • SSDEEP

    12288:/y90TtkhaDljgxTRv6BINmYaThiuBVI/p9xlSog0YqWCFxVMDZO:/ycuqlaTRy2wYadRY/tgDCRMDZO

Score
10/10
healerredlinediscoverydropperevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      6882ae8ca31412dab6e49fcbf028349f26711e3d8f4e9c171e4115b1c31e956fN.exe

    • Size

      623KB

    • MD5

      b6c7d19630e091aae08ab1852d8ea960

    • SHA1

      f97bd8cf75f6cb080c7e0faeb09d6c2df7f8dd05

    • SHA256

      6882ae8ca31412dab6e49fcbf028349f26711e3d8f4e9c171e4115b1c31e956f

    • SHA512

      b35addb848616b9c7959569b80f6a3db09e4062e902e807a8e343777795216d60a69144da5588452116e982bee9861c7b9a79c604758b8da0481788b0a60b8e7

    • SSDEEP

      12288:/y90TtkhaDljgxTRv6BINmYaThiuBVI/p9xlSog0YqWCFxVMDZO:/ycuqlaTRy2wYadRY/tgDCRMDZO

    Score
    10/10
    healerredlinediscoverydropperevasioninfostealerpersistencetrojan

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

      dropperhealer

    • Healer family

      healer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks