2fa961b375e2da330a3b514d2c64bff25f393a2a58adb19f2372609308426060

Submit
Reports

Overview

overview

Static

static

1238663077...be.exe

windows10-2004-x64

2176dd1779...68.exe

windows10-2004-x64

25c57e6714...48.exe

windows7-x64

25c57e6714...48.exe

windows10-2004-x64

604faa1b56...ed.exe

windows7-x64

604faa1b56...ed.exe

windows10-2004-x64

611b640fd7...5e.exe

windows10-2004-x64

61ec6f7f31...74.exe

windows10-2004-x64

654aa4d5e8...3b.exe

windows10-2004-x64

6c15f1899d...ed.exe

windows10-2004-x64

7b22e6cc31...ce.exe

windows10-2004-x64

8a68d5e2ce...71.exe

windows10-2004-x64

9a72ed316b...b3.exe

windows10-2004-x64

b2abc74f29...1f.exe

windows10-2004-x64

ba5c9d840c...7b.exe

windows10-2004-x64

ba769ab008...cb.exe

windows10-2004-x64

c29b675475...fe.exe

windows10-2004-x64

c39106a352...4e.exe

windows7-x64

c39106a352...4e.exe

windows10-2004-x64

ecc005f21f...de.exe

windows10-2004-x64

f0fb625894...03.exe

windows10-2004-x64

f66a0103e4...71.exe

windows10-2004-x64

fd5bd6afc5...4f.exe

windows10-2004-x64

Analysis

max time kernel
0s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
09-05-2024 14:38

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1238663077477c73376048d8230b1c33b6f5f6a62da8a6c1274721591dac70be.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

2176dd177933f7067296700761e340f0aada8c29c352796e3aeb0be5db5e1368.exe

Resource

win10v2004-20240426-en

amadey healer redline smokeloader news backdoor dropper evasion infostealer persistence trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral3

Sample

25c57e67144c4603cb7936eb9ad62fb4a4b313d0acb99262c66c4792f6ecdf48.exe

Resource

win7-20240220-en

redline 1366220748 discovery infostealer spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral4

Sample

25c57e67144c4603cb7936eb9ad62fb4a4b313d0acb99262c66c4792f6ecdf48.exe

Resource

win10v2004-20240508-en

redline 1366220748 discovery infostealer spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral5

Sample

604faa1b561362f508b03ad69516b2debf7434ce4ec5f42177ba41cf3907cbed.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

604faa1b561362f508b03ad69516b2debf7434ce4ec5f42177ba41cf3907cbed.exe

Resource

win10v2004-20240426-en

redline zgrat discovery infostealer rat spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral7

Sample

611b640fd7c9e06cb4ffde1db21b1f9ace29ac4c504fc14569faf426b234ec5e.exe

Resource

win10v2004-20240426-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral8

Sample

61ec6f7f3198f2f73155461b5544c1c55e467d0faa1776e05504a411b0530974.exe

Resource

win10v2004-20240508-en

amadey healer redline smokeloader welos backdoor dropper evasion infostealer persistence trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral9

Sample

654aa4d5e8d49043a4c5b40ef9c1b2fde8bd371386fd43ed6b7c1d719f41533b.exe

Resource

win10v2004-20240508-en

amadey healer redline smokeloader nasa backdoor dropper evasion infostealer persistence trojan

windows10-2004-x64

18 signatures

150 seconds

Behavioral task

behavioral10

Sample

6c15f1899ddb76b31fda1ef8a7d18f02ebe3c6f0dc3202cb51c180fecb4fcfed.exe

Resource

win10v2004-20240426-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral11

Sample

7b22e6cc31710809bbb88f27afa15ad45784dd0ccd3da27be9b6ca3b039a15ce.exe

Resource

win10v2004-20240508-en

amadey healer redline krast dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral12

Sample

8a68d5e2cebc81b87ef22282e4eb9af0b0776fe47cb4a1e39aaed96f3b5fa171.exe

Resource

win10v2004-20240508-en

redline lamp infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

9a72ed316bbd2e389eb2ecd7243e5841d041badae874aa11f831b452a7cff8b3.exe

Resource

win10v2004-20240226-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral14

Sample

b2abc74f29ed52ec7d83d19dcdda578b75bfabfe3cb6be161acad9d570a9601f.exe

Resource

win10v2004-20240508-en

healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral15

Sample

ba5c9d840c93ebc6710e647c2536f2c811d7af83c76d5eda892fe21495932d7b.exe

Resource

win10v2004-20240426-en

amadey healer redline papik dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral16

Sample

ba769ab00897d4fb55dffd961262aca94281c6efccb3b806cc40b3c0bfa64fcb.exe

Resource

win10v2004-20240426-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral17

Sample

c29b675475cb8428efab71268c98263fcbf9de29cfb64f21bf49b0a28c5982fe.exe

Resource

win10v2004-20240508-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral18

Sample

c39106a3520b59f859a00bc0014f6b5a4846b40742a925b66283b31e62094c4e.exe

Resource

win7-20240221-en

healer dropper evasion trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral19

Sample

c39106a3520b59f859a00bc0014f6b5a4846b40742a925b66283b31e62094c4e.exe

Resource

win10v2004-20240508-en

healer dropper evasion trojan

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

ecc005f21f15aefcf4a4280bfeddf37e7a9066e1fede069eb10a19bfaf62dade.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

f0fb625894c32db0094ce88fe51ad9ddb2db188124af7a638cf184eccf3d1203.exe

Resource

win10v2004-20240426-en

healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

f66a0103e4528b09122b55cb248c3007154afc26e699fa5ddf5d3f200e810a71.exe

Resource

win10v2004-20240508-en

redline kira infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral23

Sample

fd5bd6afc507aad0acace57fc3b77a0de443e12efcdb3857d899395a962a3b4f.exe

Resource

win10v2004-20240508-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Errors

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\ecc005f21f15aefcf4a4280bfeddf37e7a9066e1fede069eb10a19bfaf62dade.exe command="C:\Users\Admin\AppData\Local\Temp\ecc005f21f15aefcf4a4280bfeddf37e7a9066e1fede069eb10a19bfaf62dade.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

ecc005f21f15aefcf4a4280bfeddf37e7a9066e1fede069eb10a19bfaf62dade.exe
Size

1.2MB
MD5

108da43ca546ecda525fb9192e48bbab
SHA1

89e854990351e39312d835f972d5dd26c83e90cf
SHA256

ecc005f21f15aefcf4a4280bfeddf37e7a9066e1fede069eb10a19bfaf62dade
SHA512

47927611bcecf322864a8e6c62e43c284d7cfffe67b07096db04d3933ebd08484b4b8e25586721ed5313f24f0bfe3ff872cf7a76b6a7c98efd3db0f240a14dcf
SSDEEP

24576:6ysB4DrCYYGq1BnTNaz6/usrdYu2GGriw+qx2u+ZXp9eS8Nts3TM:Bs4CjBnTNazeu8dT2nRx1+n8Nts3Y

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads