Overview

overview

10

Static

static

3

ba36c8b279...f6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba36c8b2791c166735060bfb3b139b73cd1c06febe1f8e6e858582eebef1d5f6.exe

  • Size

    763KB

  • Sample

    241123-dpvfjssrem

  • MD5

    2548aa362b6a9d35a822594cf3462cc3

  • SHA1

    672f91567badcd96964ce1eba033dfd45dd82b67

  • SHA256

    ba36c8b2791c166735060bfb3b139b73cd1c06febe1f8e6e858582eebef1d5f6

  • SHA512

    55b3872083be0d6a978bc51be8de18ff6797b392f2ac59a4521ea81a001cfc3b27efea46974384d941db2d0357c1199b7dbc38eab775346ea5b338261ab73c9a

  • SSDEEP

    12288:ly90P2sTIu1kewXrK3UlKI0l7nfHWLgVns8cLZ1mas6KbjJgWJaOQ+ADEADhp3:ly8222Fe3kemEs8cjmN6MVgLL+aP3

Score
10/10
healerredlinediscoverydropperevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      ba36c8b2791c166735060bfb3b139b73cd1c06febe1f8e6e858582eebef1d5f6.exe

    • Size

      763KB

    • MD5

      2548aa362b6a9d35a822594cf3462cc3

    • SHA1

      672f91567badcd96964ce1eba033dfd45dd82b67

    • SHA256

      ba36c8b2791c166735060bfb3b139b73cd1c06febe1f8e6e858582eebef1d5f6

    • SHA512

      55b3872083be0d6a978bc51be8de18ff6797b392f2ac59a4521ea81a001cfc3b27efea46974384d941db2d0357c1199b7dbc38eab775346ea5b338261ab73c9a

    • SSDEEP

      12288:ly90P2sTIu1kewXrK3UlKI0l7nfHWLgVns8cLZ1mas6KbjJgWJaOQ+ADEADhp3:ly8222Fe3kemEs8cjmN6MVgLL+aP3

    Score
    10/10
    healerredlinediscoverydropperevasioninfostealerpersistencetrojan

    • Detects Healer an antivirus disabler dropper

    • Healer

      Healer an antivirus disabler dropper.

      dropperhealer

    • Healer family

      healer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks