0d3870d43882a263c0511d1f89fbae94912261a6be64dc949d87cdad8f3a7de8

Submit
Reports

Overview

overview

Static

static

06ca8c24aa...f2.exe

windows10-2004-x64

082abd50bc...72.exe

windows10-2004-x64

0a65c97791...d1.exe

windows10-2004-x64

0a70b4612b...f6.exe

windows10-2004-x64

131675744e...29.exe

windows10-2004-x64

136b546d35...01.exe

windows10-2004-x64

3a5fd7dfde...92.exe

windows10-2004-x64

42aaf3452f...91.exe

windows10-2004-x64

51b44e7fef...e7.exe

windows7-x64

51b44e7fef...e7.exe

windows10-2004-x64

51d640efcf...44.exe

windows10-2004-x64

565e580e21...f4.exe

windows7-x64

565e580e21...f4.exe

windows10-2004-x64

58f6935c15...59.exe

windows10-2004-x64

660944c2e2...12.exe

windows10-2004-x64

6b061fa476...e8.exe

windows10-2004-x64

7d1f6eeb31...ef.exe

windows10-2004-x64

80f298c436...94.exe

windows10-2004-x64

85555569bb...4d.exe

windows10-2004-x64

bd2cad4003...26.exe

windows10-2004-x64

cfdc6cd562...d3.exe

windows10-2004-x64

d9d3f90c8c...39.exe

windows7-x64

d9d3f90c8c...39.exe

windows10-2004-x64

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
09-05-2024 18:18

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

06ca8c24aac1dfc98dcff3632bd9a2a735d5a57c7e634d8c9100f6446b5423f2.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral2

Sample

082abd50bc322e65df7b85b918d5bc248c652483544b6e4c453e9531969df172.exe

Resource

win10v2004-20240508-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral3

Sample

0a65c977910ca28680d005dc6473013f3db66862b80fc54be76caaa774022bd1.exe

Resource

win10v2004-20240508-en

healer redline kira dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral4

Sample

0a70b4612b5a8fdde3e7cb75dcc0caca23c46bd980d396bb52f7efc9d122c8f6.exe

Resource

win10v2004-20240226-en

amadey healer redline krast dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral5

Sample

131675744e12e01eb73fd34a82dd03d2d5ab80bd88b854836a13d0065e536c29.exe

Resource

win10v2004-20240508-en

amadey healer redline naher dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral6

Sample

136b546d35913e21d69572f169ae203809c1521256619595aa6b15d763436c01.exe

Resource

win10v2004-20240426-en

amadey healer redline smokeloader krast backdoor dropper evasion infostealer persistence trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral7

Sample

3a5fd7dfdeb2d39f59735a8fd4f3621bef5a632886c19bfffeacac3350c44092.exe

Resource

win10v2004-20240426-en

healer redline masha dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral8

Sample

42aaf3452f3dbd3fec800b9307def7e1463e88016e6585d09719f8642ef8f491.exe

Resource

win10v2004-20240508-en

amadey healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral9

Sample

51b44e7fef51fc7ece012253c1667cd5cb95636d10007d0e2be5e98e7fd405e7.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

51b44e7fef51fc7ece012253c1667cd5cb95636d10007d0e2be5e98e7fd405e7.exe

Resource

win10v2004-20240508-en

redline 7001210066 discovery infostealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral11

Sample

51d640efcf425557c7e898a690d229994ff2fc0610138596398e8cdd60583244.exe

Resource

win10v2004-20240426-en

amadey healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral12

Sample

565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4.exe

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

58f6935c15dbff1158f14839ec623027150c9807c5e1aeaaf3896d516c27be59.exe

Resource

win10v2004-20240508-en

amadey healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral15

Sample

660944c2e28e356790c36fcc99f1413b6daff34f154aeeda556c351fc695e812.exe

Resource

win10v2004-20240426-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral16

Sample

6b061fa4768c28530459442828163e1c4cf33aa058cd0846566771b57ecf36e8.exe

Resource

win10v2004-20240426-en

healer redline kira dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral17

Sample

7d1f6eeb31bd2e40692c777766b604a0bf50848518f5c931a53d7c48b988e8ef.exe

Resource

win10v2004-20240426-en

healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral18

Sample

80f298c436aec6fc79755a500c4350e1d63215b9088f36710903936de3cedc94.exe

Resource

win10v2004-20240226-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral19

Sample

85555569bb7d45d357512a0eafac484c22aee485efcb08f16f10d5cba19ad94d.exe

Resource

win10v2004-20240426-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral20

Sample

bd2cad400370a1839dedfee01ba51651868baedcef41cd34976bcfc1a2ccbf26.exe

Resource

win10v2004-20240426-en

healer redline crazy muha dropper evasion infostealer persistence trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral21

Sample

cfdc6cd562d69f4233d6d8bcde44d4bd5e6825bd17383e6bb2f76b9fd006ead3.exe

Resource

win10v2004-20240426-en

amadey healer redline smokeloader nasa backdoor dropper evasion infostealer persistence trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral22

Sample

d9d3f90c8cee71d17c70e5d1c7d465726e06b1c7cb5b617fd47d203403a1e439.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

d9d3f90c8cee71d17c70e5d1c7d465726e06b1c7cb5b617fd47d203403a1e439.exe

Resource

win10v2004-20240508-en

redline 7001210066 discovery infostealer

windows10-2004-x64

8 signatures

150 seconds

Report Analysis Logs

General

Target

565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4.exe
Size

309KB
MD5

cb6e6dd23036d3e9c3fd6fcc4e12690f
SHA1

4a5ef41dca4f37163bec679914d69cf895069c51
SHA256

565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4
SHA512

cd8004da2fe9d31748171b180aab8d2d650f08ab57e8f08d748db120dbd10730a6ad2bba28618501cc1dad2f175084df0f44db0f0a002d9124832c8ae45031aa
SSDEEP

6144:P6hm2uPpiUxyd2eVps3AzNsNkZ8+cxdj91FtG0UyfvVR7/I:Sm2uPpit6eNsN08+oz/FUy3VR7I

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4.exe
"C:\Users\Admin\AppData\Local\Temp\565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4.exe"
1⤵
PID:1952

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads