efe008ef2d2f134b3dc13b0e7774cf5afaac37652f491658b45665e175cf12b9

Submit
Reports

Overview

overview

Static

static

0e13a10fd6...cb.exe

windows10-2004-x64

1d089addfe...b5.exe

windows10-2004-x64

35d50aca92...42.exe

windows10-2004-x64

3ab23a3036...c6.exe

windows10-2004-x64

58ac39bbc6...9e.exe

windows10-2004-x64

64792ffeec...35.exe

windows10-2004-x64

654aa4d5e8...3b.exe

windows10-2004-x64

677afbc183...fd.exe

windows7-x64

677afbc183...fd.exe

windows10-2004-x64

71d1420ff1...80.exe

windows10-2004-x64

7a08e2a624...2b.exe

windows10-2004-x64

8c7a2623ea...7d.exe

windows10-2004-x64

c64d3873d4...2e.exe

windows10-2004-x64

cbd8058875...48.exe

windows7-x64

cbd8058875...48.exe

windows10-2004-x64

ec20c35511...9b.exe

windows10-2004-x64

eca60134d9...3f.exe

windows10-2004-x64

ecc005f21f...de.exe

windows10-2004-x64

f0fb625894...03.exe

windows10-2004-x64

f66a0103e4...71.exe

windows10-2004-x64

ffa14d4c0b...02.exe

windows10-2004-x64

Analysis

max time kernel
0s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
10-05-2024 14:15

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0e13a10fd67a47892e598c6953856fd7786d3e7b1f70c519cae5cfe6b7ce37cb.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral2

Sample

1d089addfe2c948a1a6c3e3f250f79ed616a211060d99b5efec78c1eb1b2b0b5.exe

Resource

win10v2004-20240426-en

healer redline dumud dropper evasion infostealer persistence trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral3

Sample

35d50aca923965e5a644e1735c8cd657d562282a8fddd8a654982c84f9258342.exe

Resource

win10v2004-20240426-en

amadey healer redline krast dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral4

Sample

3ab23a30366cb3cfeded88ccba1999ff26ead2bcde69af9aad7e2ed1fa054cc6.exe

Resource

win10v2004-20240426-en

redline kira infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

58ac39bbc629fc59614b3b5578967a587814d2de70f8a9cba5090cdfbbfb469e.exe

Resource

win10v2004-20240426-en

amadey healer smokeloader backdoor dropper evasion persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral6

Sample

64792ffeeccbab6bb3d100eb7b35cb61c8c90b802e42d83350baf6d1ceefbb35.exe

Resource

win10v2004-20240426-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral7

Sample

654aa4d5e8d49043a4c5b40ef9c1b2fde8bd371386fd43ed6b7c1d719f41533b.exe

Resource

win10v2004-20240508-en

amadey healer redline smokeloader nasa backdoor dropper evasion infostealer persistence trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral8

Sample

677afbc18346258efc780d794cf589d9e949ec77c0f68fc663b38c6f663cf7fd.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

677afbc18346258efc780d794cf589d9e949ec77c0f68fc663b38c6f663cf7fd.exe

Resource

win10v2004-20240508-en

redline zgrat discovery infostealer rat spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral10

Sample

71d1420ff1b7b7e37d536b943d3ba7e0a2fa5972fce4156cbbc73c7416d49d80.exe

Resource

win10v2004-20240508-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral11

Sample

7a08e2a624c497b3986fed503c84dd39612ab1fdda740280e5a1514c1aac802b.exe

Resource

win10v2004-20240426-en

amadey healer redline smokeloader roma backdoor dropper evasion infostealer persistence trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral12

Sample

8c7a2623ea0bfbad72a17add57243068958fa7289cd1319d5cbc3af84eeac07d.exe

Resource

win10v2004-20240426-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral13

Sample

c64d3873d4dbf74d0c6e28f27a09adb2a8c897e218d1a4a4f5822391bf80c92e.exe

Resource

win10v2004-20240508-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral14

Sample

cbd8058875fbf90f6f6a3c6825fab01a2bac4ffb1903f2a0405d451060ea1a48.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

cbd8058875fbf90f6f6a3c6825fab01a2bac4ffb1903f2a0405d451060ea1a48.exe

Resource

win10v2004-20240508-en

redline 5195552529 discovery infostealer spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

ec20c355119abdb18d4433dc95969146db3a558e4e316a175b184ea42d45f89b.exe

Resource

win10v2004-20240508-en

healer redline mihan dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral17

Sample

eca60134d922b4bca2cb5060841b6d45581f33e04f763a9c118fc9f22e289e3f.exe

Resource

win10v2004-20240508-en

redline kira infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

ecc005f21f15aefcf4a4280bfeddf37e7a9066e1fede069eb10a19bfaf62dade.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

f0fb625894c32db0094ce88fe51ad9ddb2db188124af7a638cf184eccf3d1203.exe

Resource

win10v2004-20240426-en

healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral20

Sample

f66a0103e4528b09122b55cb248c3007154afc26e699fa5ddf5d3f200e810a71.exe

Resource

win10v2004-20240426-en

redline kira infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral21

Sample

ffa14d4c0be8bc789970a81ab0d1c4ceb689e261224f173a8dbd9609a9b45102.exe

Resource

win10v2004-20240508-en

amadey healer smokeloader backdoor dropper evasion persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Errors

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\ecc005f21f15aefcf4a4280bfeddf37e7a9066e1fede069eb10a19bfaf62dade.exe command="C:\Users\Admin\AppData\Local\Temp\ecc005f21f15aefcf4a4280bfeddf37e7a9066e1fede069eb10a19bfaf62dade.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

ecc005f21f15aefcf4a4280bfeddf37e7a9066e1fede069eb10a19bfaf62dade.exe
Size

1.2MB
MD5

108da43ca546ecda525fb9192e48bbab
SHA1

89e854990351e39312d835f972d5dd26c83e90cf
SHA256

ecc005f21f15aefcf4a4280bfeddf37e7a9066e1fede069eb10a19bfaf62dade
SHA512

47927611bcecf322864a8e6c62e43c284d7cfffe67b07096db04d3933ebd08484b4b8e25586721ed5313f24f0bfe3ff872cf7a76b6a7c98efd3db0f240a14dcf
SSDEEP

24576:6ysB4DrCYYGq1BnTNaz6/usrdYu2GGriw+qx2u+ZXp9eS8Nts3TM:Bs4CjBnTNazeu8dT2nRx1+n8Nts3Y

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads