b2e3ef893eb456057652ab4434c1204484055bd056354e8672fc45f069c32800

Submit
Reports

Overview

overview

Static

static

143e14de3a...c5.exe

windows10-2004-x64

22c5bd0a3e...19.exe

windows10-2004-x64

291dafd231...e9.exe

windows10-2004-x64

2e0a9b6a39...9b.exe

windows10-2004-x64

499d652934...48.exe

windows7-x64

499d652934...48.exe

windows10-2004-x64

4b8eb94185...c3.exe

windows10-2004-x64

4d09936a4a...bf.exe

windows10-2004-x64

4fbcb0a2f4...73.exe

windows10-2004-x64

53ecffef24...36.exe

windows10-2004-x64

59a57474eb...06.exe

windows10-2004-x64

61f1416a77...2b.exe

windows10-2004-x64

6aec183a58...31.exe

windows10-2004-x64

7182994846...ce.exe

windows7-x64

7182994846...ce.exe

windows10-2004-x64

7506757ba8...b0.exe

windows10-2004-x64

80ada740eb...52.exe

windows10-2004-x64

9e8418826f...52.exe

windows10-2004-x64

a898d72b49...84.exe

windows10-2004-x64

e6baad5a7e...5c.exe

windows10-2004-x64

ea3dd01036...9e.exe

windows10-2004-x64

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
09-05-2024 15:28

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

143e14de3ab20f2359132907b991db6a76d0d521ba132b83a736d149619409c5.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

22c5bd0a3e3c03e512f45c0ebd81b9cf7695279360a1c40cec90cf3efea5f219.exe

Resource

win10v2004-20240426-en

amadey healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral3

Sample

291dafd2314b673e9b81ee6bd583911db702f910a342dc716c49ce5922bcefe9.exe

Resource

win10v2004-20240508-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral4

Sample

2e0a9b6a39ce81b93beb155ac3c237f4a6b9248d6b872ed22bfdf8851796b19b.exe

Resource

win10v2004-20240508-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral5

Sample

499d652934b65eebaaa2d82a49a8810d8dbc1d3feb82c20d3193b41d1d599648.exe

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

499d652934b65eebaaa2d82a49a8810d8dbc1d3feb82c20d3193b41d1d599648.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

4b8eb941853bd390287dbcbe8dae61e1b226baa6661172eff6766605a0047ec3.exe

Resource

win10v2004-20240426-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral8

Sample

4d09936a4a5e882005320c53757dc18469109b9f86d4b6003bb674e1658b0dbf.exe

Resource

win10v2004-20240226-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral9

Sample

4fbcb0a2f45aaeb44239e2e00233d34f6efb6c46aa551acf21567602c1b83573.exe

Resource

win10v2004-20240508-en

amadey healer redline krast dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral10

Sample

53ecffef24ddea22780ff63e0224bd9c1bf9d8533760949fff138bd5c432ce36.exe

Resource

win10v2004-20240426-en

amadey healer redline krast dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral11

Sample

59a57474ebe62f572bb724c334e3f51070b9605bdb8a26ca62aa328af1683a06.exe

Resource

win10v2004-20240508-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

61f1416a771544600c2eb0122b2860693273306c4f450b6c7dc5af2a07a52b2b.exe

Resource

win10v2004-20240508-en

healer redline masha dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral13

Sample

6aec183a583bea0012704d51b860a5d4dc2eaa2d5a1b16c1b991a8fb1cc86e31.exe

Resource

win10v2004-20240426-en

amadey healer redline krast dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral14

Sample

71829948467d2f16aa6d5c19d4887b4da3a316c3778ff88b4130bc047d02f5ce.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

71829948467d2f16aa6d5c19d4887b4da3a316c3778ff88b4130bc047d02f5ce.exe

Resource

win10v2004-20240426-en

redline 5195552529 discovery infostealer spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

7506757ba820d7ae28d178498db7124eb1c6e346d4700098f7492a46d5e851b0.exe

Resource

win10v2004-20240426-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral17

Sample

80ada740ebfd0573ea8825fc2b499a0d326897ebf254fc015852802a58a05452.exe

Resource

win10v2004-20240426-en

healer redline masha dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral18

Sample

9e8418826f07274a00f90b02756f693711350696a60867c9adff98b6c0268e52.exe

Resource

win10v2004-20240508-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral19

Sample

a898d72b49cc00c36f48fd52d4f754e3c8b758780323239ea18208abf91a9b84.exe

Resource

win10v2004-20240426-en

amadey healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral20

Sample

e6baad5a7e5385bc92311bc785faeabed25354b22d90f6422ffc65d07a913c5c.exe

Resource

win10v2004-20240508-en

amadey healer smokeloader backdoor dropper evasion persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral21

Sample

ea3dd01036351608cfd1a08d2d7331439b7acea2492116d550411f5e93529f9e.exe

Resource

win10v2004-20240508-en

healer redline masha dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Report Analysis Logs

General

Target

499d652934b65eebaaa2d82a49a8810d8dbc1d3feb82c20d3193b41d1d599648.exe
Size

309KB
MD5

6ef8f31678925f2d219958320d6dcdfd
SHA1

0406dda51bcd8b5e414929570a204f88c190fee7
SHA256

499d652934b65eebaaa2d82a49a8810d8dbc1d3feb82c20d3193b41d1d599648
SHA512

72dfd60f5fadd620d09c3ed64c9332427d95f0cc6369521f569b08deadbf29447f52ece80239da1c7527d35fdda0db9fb8c188472ca1fd74b13322842e03f226
SSDEEP

6144:qch22uPpiUxyd2eVps3Az8MWsFXrYP5IkldbXKQ4/I:522uPpit6e8yFXri5d/mQSI

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\499d652934b65eebaaa2d82a49a8810d8dbc1d3feb82c20d3193b41d1d599648.exe
"C:\Users\Admin\AppData\Local\Temp\499d652934b65eebaaa2d82a49a8810d8dbc1d3feb82c20d3193b41d1d599648.exe"
1⤵
PID:4412

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads