Overview

overview

10

Static

static

3

f9734db59e...01.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9734db59ef906dbd0b61f02582810cf9e2a3096c7976df07217bc3123eeb701.exe

  • Size

    406KB

  • Sample

    241120-c4117stlgl

  • MD5

    b7523ce55a971b976fa86a806b817ee2

  • SHA1

    dafc2ddccf0f7149d20780791802a05976385e45

  • SHA256

    f9734db59ef906dbd0b61f02582810cf9e2a3096c7976df07217bc3123eeb701

  • SHA512

    48f2f17048c54c4e3af6f5143dfabcc2aa007a5f1d19635e4cf03b123a79f8d166e0602e19c48cb29b5fadba7654d71bff018d1013b18e57da0cdb988b539ce5

  • SSDEEP

    12288:By90WVWg6K4QbphUavFTn1B0udVJnH8sY:ByJB63CrRiy8sY

Score
10/10
healerredlinediscoverydropperevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      f9734db59ef906dbd0b61f02582810cf9e2a3096c7976df07217bc3123eeb701.exe

    • Size

      406KB

    • MD5

      b7523ce55a971b976fa86a806b817ee2

    • SHA1

      dafc2ddccf0f7149d20780791802a05976385e45

    • SHA256

      f9734db59ef906dbd0b61f02582810cf9e2a3096c7976df07217bc3123eeb701

    • SHA512

      48f2f17048c54c4e3af6f5143dfabcc2aa007a5f1d19635e4cf03b123a79f8d166e0602e19c48cb29b5fadba7654d71bff018d1013b18e57da0cdb988b539ce5

    • SSDEEP

      12288:By90WVWg6K4QbphUavFTn1B0udVJnH8sY:ByJB63CrRiy8sY

    Score
    10/10
    healerredlinediscoverydropperevasioninfostealerpersistencetrojan

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

      dropperhealer

    • Healer family

      healer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks