General
-
Target
cd3e7d4469a56a521d6cf67623d78aa6ba6c615d985bbbc51296c2f98513ef50N.exe
-
Size
707KB
-
Sample
241125-sxvhvatlbs
-
MD5
91925610e25a2c425f9a5c5dd3016cf0
-
SHA1
709715d3c78309eb18d868ebde3218c04080a752
-
SHA256
cd3e7d4469a56a521d6cf67623d78aa6ba6c615d985bbbc51296c2f98513ef50
-
SHA512
077d55e7c97b63a959d52fda1cf7679c803d7863c04133119cd1a097b05e5bb04fa070d02d8408874d4bba18bb600fe5e16f555eed14ab9f88d8b50436c05fda
-
SSDEEP
12288:Ty90P6zuCta2sTIMa8Ltk3KIRj/wSzQ4QXtPencIEA8RWoZVZ:Ty5zT0Yt3/OSzSQnuA8RzVZ
Static task
static1
Behavioral task
behavioral1
Sample
cd3e7d4469a56a521d6cf67623d78aa6ba6c615d985bbbc51296c2f98513ef50N.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
cd3e7d4469a56a521d6cf67623d78aa6ba6c615d985bbbc51296c2f98513ef50N.exe
-
Size
707KB
-
MD5
91925610e25a2c425f9a5c5dd3016cf0
-
SHA1
709715d3c78309eb18d868ebde3218c04080a752
-
SHA256
cd3e7d4469a56a521d6cf67623d78aa6ba6c615d985bbbc51296c2f98513ef50
-
SHA512
077d55e7c97b63a959d52fda1cf7679c803d7863c04133119cd1a097b05e5bb04fa070d02d8408874d4bba18bb600fe5e16f555eed14ab9f88d8b50436c05fda
-
SSDEEP
12288:Ty90P6zuCta2sTIMa8Ltk3KIRj/wSzQ4QXtPencIEA8RWoZVZ:Ty5zT0Yt3/OSzSQnuA8RzVZ
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1