7575b6a7ca1e6aeecfc397511f1b32b4a78d90e4766e4942510517290d09a617

Submit
Reports

Overview

overview

Static

static

0cc30df7f6...35.exe

windows10-2004-x64

1208df4133...ab.exe

windows10-2004-x64

2d6ce3858d...b0.exe

windows7-x64

2d6ce3858d...b0.exe

windows10-2004-x64

3a484bb7d4...29.exe

windows10-2004-x64

3e36cb02ee...9a.exe

windows10-2004-x64

3f3ae36481...68.exe

windows7-x64

3f3ae36481...68.exe

windows10-2004-x64

4be1f370e8...6b.exe

windows7-x64

4be1f370e8...6b.exe

windows10-2004-x64

54ca5c456c...76.exe

windows10-2004-x64

6aa8d5d0d6...df.exe

windows10-2004-x64

8db6f54494...1f.exe

windows10-2004-x64

b07c30e9c2...0f.exe

windows10-2004-x64

b62068be50...da.exe

windows10-2004-x64

c1c526ed2a...52.exe

windows10-2004-x64

cd9de412cd...04.exe

windows7-x64

cd9de412cd...04.exe

windows10-2004-x64

dce60a71ca...cc.exe

windows10-2004-x64

e25842dbe6...9e.exe

windows10-2004-x64

f358ce518b...e2.exe

windows10-2004-x64

f5bf417643...17.exe

windows7-x64

f5bf417643...17.exe

windows10-2004-x64

f6dc0b4c65...d6.exe

windows10-2004-x64

f8dfa98c4e...be.exe

windows10-2004-x64

Analysis

max time kernel
0s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
09-05-2024 18:07

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0cc30df7f6ff94fab7858c7361a84798ffe5198fda1df8e7320f4e14124fd535.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

1208df413315575653953f79f71da4afa0f3816339cca881a3bd12be0cc7f0ab.exe

Resource

win10v2004-20240508-en

amadey healer redline smokeloader nasa backdoor dropper evasion infostealer persistence trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral3

Sample

2d6ce3858dc5849cd0e5ce873e285bbd3b6a34ad11e20937b1827c8f3594abb0.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

2d6ce3858dc5849cd0e5ce873e285bbd3b6a34ad11e20937b1827c8f3594abb0.exe

Resource

win10v2004-20240508-en

redline 5637482599 discovery infostealer spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral5

Sample

3a484bb7d4882d8f4ab5dcb7c60a4d1397a642611888b68c5e13702926794729.exe

Resource

win10v2004-20240426-en

amadey healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral6

Sample

3e36cb02ee15f0803929c4cc4ae0639ce652b40ae83519e020dc3e5273dde39a.exe

Resource

win10v2004-20240508-en

evasion persistence trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral7

Sample

3f3ae364814c4c229616f1792f939131d6af421c4fa431b81f955015d14c8168.exe

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

3f3ae364814c4c229616f1792f939131d6af421c4fa431b81f955015d14c8168.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

4be1f370e880d06da141a2c9957de478c40592a3abf6312aa8c2ef401a37d36b.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

4be1f370e880d06da141a2c9957de478c40592a3abf6312aa8c2ef401a37d36b.exe

Resource

win10v2004-20240426-en

redline 5195552529 discovery infostealer spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral11

Sample

54ca5c456ca4541c7a54027ae67295d9bdec93f29d76b9e8ab36e1fd52b1b876.exe

Resource

win10v2004-20240426-en

amadey healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral12

Sample

6aa8d5d0d6b96fe2a165ee46c9e31059a444b4fae6660eee669539f88bf869df.exe

Resource

win10v2004-20240426-en

healer redline dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral13

Sample

8db6f544940545b4e7f0eef92bc68e65f5e9efd3707f33b7e5594777d56ed71f.exe

Resource

win10v2004-20240508-en

amadey healer redline papik dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral14

Sample

b07c30e9c2f5b9fe74bfb66f2c8682edde02cb68cd4e8a75976cca328e48e60f.exe

Resource

win10v2004-20240508-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral15

Sample

b62068be50129166f539eb32a63746c4245a497e9b72553efdf326582cc5f4da.exe

Resource

win10v2004-20240426-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

c1c526ed2ab259f0f169f9f6ea8e5765aeff3889749ee6e4c140d24a06cd2f52.exe

Resource

win10v2004-20240426-en

amadey mystic redline gena infostealer persistence stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral17

Sample

cd9de412cda28c677351594338bc352dbcafb8652328624f624263b71bac3604.exe

Resource

win7-20240221-en

redline lamp infostealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

cd9de412cda28c677351594338bc352dbcafb8652328624f624263b71bac3604.exe

Resource

win10v2004-20240508-en

redline lamp infostealer

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

dce60a71ca88a61a579b58be67a969e9f1f6620feaff4c7102883b680d0162cc.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

e25842dbe6ab8469f81bd821ab70c2818962c7a681f45dfcd09f741409b2bb9e.exe

Resource

win10v2004-20240426-en

redline kira infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral21

Sample

f358ce518b566bea6bdd08924ef70ab740c7135042e1d38e8776afca44f4c2e2.exe

Resource

win10v2004-20240508-en

paypal evasion persistence phishing themida trojan

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral22

Sample

f5bf4176434a177447cba0b0c44a2aa84c6964ac958276a5f3d28429824e6a17.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

f5bf4176434a177447cba0b0c44a2aa84c6964ac958276a5f3d28429824e6a17.exe

Resource

win10v2004-20240508-en

redline 581694481 discovery infostealer spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral24

Sample

f6dc0b4c65662a9753e54800489b07d9f5a6a4c896a61d93f3a1a3e28d5bc9d6.exe

Resource

win10v2004-20240508-en

amadey healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral25

Sample

f8dfa98c4e38deff7955c243f9db7b01692e43c0997eca9e5e141cc565cf05be.exe

Resource

win10v2004-20240426-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Errors

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\dce60a71ca88a61a579b58be67a969e9f1f6620feaff4c7102883b680d0162cc.exe command="C:\Users\Admin\AppData\Local\Temp\dce60a71ca88a61a579b58be67a969e9f1f6620feaff4c7102883b680d0162cc.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

dce60a71ca88a61a579b58be67a969e9f1f6620feaff4c7102883b680d0162cc.exe
Size

3.8MB
MD5

dcbb8546ac03e3ee841683345965b5aa
SHA1

f1200632683ac24499e819d076d999759b6e8c24
SHA256

dce60a71ca88a61a579b58be67a969e9f1f6620feaff4c7102883b680d0162cc
SHA512

964cd4c3c1afcc069c59383e6de2f1d3f1f7fb873bb11c1552dd095529bcf6e6dd2b482a3b9f1862408dc6df15a5beb7d9a5f7bd1cd1e8a787e246fc6da76ed3
SSDEEP

49152:DtLCPo0lVRu6n4Vb/QNM0LZb5H5lK4tM5pRLoPPunS9NYnmJtE82FwIsUCGPdvmI:xSdlVRtngb/kM0LZbpCpi5GnsCw8dV5

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads