e26fabd2c7ff2793a03e50751c6b5c5606cd0dcc9f0fbec237db01080085c327

Submit
Reports

Overview

overview

Static

static

1089300575...d7.exe

windows10-2004-x64

188abd9448...8c.exe

windows10-2004-x64

1b3c0e5797...06.exe

windows10-2004-x64

265074d78c...d6.exe

windows7-x64

265074d78c...d6.exe

windows10-2004-x64

2d6ce3858d...b0.exe

windows7-x64

2d6ce3858d...b0.exe

windows10-2004-x64

3bb8a790f7...4e.exe

windows7-x64

3bb8a790f7...4e.exe

windows10-2004-x64

3df74027fe...88.exe

windows10-2004-x64

3e36cb02ee...9a.exe

windows10-2004-x64

3f3ae36481...68.exe

windows7-x64

3f3ae36481...68.exe

windows10-2004-x64

54ca5c456c...76.exe

windows10-2004-x64

6ade7d6ec7...80.exe

windows10-2004-x64

7abba1ebb5...9b.exe

windows7-x64

7abba1ebb5...9b.exe

windows10-2004-x64

809359f8fb...a0.exe

windows7-x64

809359f8fb...a0.exe

windows10-2004-x64

80a61aa8cf...4c.exe

windows10-2004-x64

855fd4cf22...dc.exe

windows10-2004-x64

a6d0e60e46...99.exe

windows10-2004-x64

b07c30e9c2...0f.exe

windows10-2004-x64

b46951fdb5...f7.exe

windows7-x64

b46951fdb5...f7.exe

windows10-2004-x64

bac7076846...e9.exe

windows10-2004-x64

f358ce518b...e2.exe

windows10-2004-x64

Analysis

max time kernel
135s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10-05-2024 15:01

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

10893005755e760cedfd88c67f168c3e2f1e26fafad63a929c1e953e718f49d7.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

188abd944862b0218c2c1eb1ca15b896c802801a2127e4abb847bc5ba1a2eb8c.exe

Resource

win10v2004-20240426-en

amadey healer redline krast dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral3

Sample

1b3c0e579787bcef84732f5265ff9b365cdc639dfb3b301ffbfb808167567506.exe

Resource

win10v2004-20240426-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral4

Sample

265074d78c68ba95d07246920d7362962c973dc99f27f0f0a587385fa5df10d6.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

265074d78c68ba95d07246920d7362962c973dc99f27f0f0a587385fa5df10d6.exe

Resource

win10v2004-20240508-en

redline 5637482599 discovery infostealer spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral6

Sample

2d6ce3858dc5849cd0e5ce873e285bbd3b6a34ad11e20937b1827c8f3594abb0.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

2d6ce3858dc5849cd0e5ce873e285bbd3b6a34ad11e20937b1827c8f3594abb0.exe

Resource

win10v2004-20240508-en

redline 5637482599 discovery infostealer spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral8

Sample

3bb8a790f7feb85fb0d0f7d2087ce3d7e4eb5577393162c735eec885b66a044e.exe

Resource

win7-20240220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

3bb8a790f7feb85fb0d0f7d2087ce3d7e4eb5577393162c735eec885b66a044e.exe

Resource

win10v2004-20240508-en

lumma stealer

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

3df74027fece0dd6e6c9f46260e3c886ecbcfd4dce43ac64a90f1211d78fe588.exe

Resource

win10v2004-20240426-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral11

Sample

3e36cb02ee15f0803929c4cc4ae0639ce652b40ae83519e020dc3e5273dde39a.exe

Resource

win10v2004-20240508-en

evasion persistence trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral12

Sample

3f3ae364814c4c229616f1792f939131d6af421c4fa431b81f955015d14c8168.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

3f3ae364814c4c229616f1792f939131d6af421c4fa431b81f955015d14c8168.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

54ca5c456ca4541c7a54027ae67295d9bdec93f29d76b9e8ab36e1fd52b1b876.exe

Resource

win10v2004-20240426-en

amadey healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral15

Sample

6ade7d6ec7a6381185b43d64ae2429ee9c4ee1ccf584c5bfe5887d96d03e3680.exe

Resource

win10v2004-20240426-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral16

Sample

7abba1ebb59dafe06cecf717ad708d5d5e873cb2cd6cfa536b3cf5eef782c19b.exe

Resource

win7-20240215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

7abba1ebb59dafe06cecf717ad708d5d5e873cb2cd6cfa536b3cf5eef782c19b.exe

Resource

win10v2004-20240508-en

redline 5637482599 discovery infostealer spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral18

Sample

809359f8fb559a3e0706be1ec11da34660665a2a47a87b69f26c35bc7ece21a0.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

809359f8fb559a3e0706be1ec11da34660665a2a47a87b69f26c35bc7ece21a0.exe

Resource

win10v2004-20240426-en

redline 5637482599 discovery infostealer spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral20

Sample

80a61aa8cf25695a9f716e44c730ff90e095337b215aae6d732cf04f807bf34c.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

855fd4cf224283ecfadcbbde8f8bda52096a389946f6890fa83b09e26cea10dc.exe

Resource

win10v2004-20240508-en

healer redline masha dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

a6d0e60e46974bcc2b95d79efe42aef131019e1a1db2f71a780c51a68cc36199.exe

Resource

win10v2004-20240426-en

amadey healer redline smokeloader lande backdoor dropper evasion infostealer persistence trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral23

Sample

b07c30e9c2f5b9fe74bfb66f2c8682edde02cb68cd4e8a75976cca328e48e60f.exe

Resource

win10v2004-20240508-en

healer redline lamp dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral24

Sample

b46951fdb517d60cd2516aa317646c027a36d6b4e159c8d97dea70549b3b00f7.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

b46951fdb517d60cd2516aa317646c027a36d6b4e159c8d97dea70549b3b00f7.exe

Resource

win10v2004-20240508-en

redline 7001210066 discovery infostealer

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral26

Sample

bac70768466a80a4253c63add9d0601c8d645565be4c9ab0536b250c8e01a0e9.exe

Resource

win10v2004-20240226-en

healer redline mihan dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral27

Sample

f358ce518b566bea6bdd08924ef70ab740c7135042e1d38e8776afca44f4c2e2.exe

Resource

win10v2004-20240426-en

paypal evasion persistence phishing themida trojan

windows10-2004-x64

20 signatures

150 seconds

Report Analysis Logs

General

Target

3f3ae364814c4c229616f1792f939131d6af421c4fa431b81f955015d14c8168.exe
Size

308KB
MD5

d1692bfe69b9eba7c632642192c2387a
SHA1

132970b55855bcff595ac8af257b27c4b0fcebc0
SHA256

3f3ae364814c4c229616f1792f939131d6af421c4fa431b81f955015d14c8168
SHA512

715b107c3e4a7772159c0de693ccacf36a2f62f54dc3cac0b4c7f6e0f8f25996472803be965eaadea3906e100e4f8557782cee76399a8787d91f19ec3107cf06
SSDEEP

6144:dMbygE5HGw3GNc6xTQROzphoTjgEV9YCHtWRKZl/I:AygE5HGvWSpmnr7p3nI

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\3f3ae364814c4c229616f1792f939131d6af421c4fa431b81f955015d14c8168.exe
"C:\Users\Admin\AppData\Local\Temp\3f3ae364814c4c229616f1792f939131d6af421c4fa431b81f955015d14c8168.exe"
1⤵
PID:380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4124 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:8
1⤵
PID:2732

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads