dd49e60a45e3962b98b32d0ae9a1256ae1e60ba2b696a005fe221e32f96d996b

Submit
Reports

Overview

overview

Static

static

00dc3a43dd...78.exe

windows10-2004-x64

061669c83b...c0.exe

windows10-2004-x64

0cc30df7f6...35.exe

windows10-2004-x64

1b26ae68f4...45.exe

windows10-2004-x64

3b9256f691...90.exe

windows7-x64

3b9256f691...90.exe

windows10-2004-x64

3ddd80ba69...8c.exe

windows7-x64

3ddd80ba69...8c.exe

windows10-2004-x64

3ff55c48fd...c7.exe

windows10-2004-x64

50be51fdd5...4b.exe

windows10-2004-x64

565e580e21...f4.exe

windows7-x64

565e580e21...f4.exe

windows10-2004-x64

5f157bb7f5...80.exe

windows10-2004-x64

6c066f3c43...19.exe

windows10-2004-x64

8355a17b5f...ac.exe

windows10-2004-x64

9a3f5d3f84...b2.exe

windows10-2004-x64

ae66f2f071...07.exe

windows10-2004-x64

b0fef95ff5...7c.exe

windows10-2004-x64

b11b1b57a3...06.exe

windows10-2004-x64

cd9de412cd...04.exe

windows7-x64

cd9de412cd...04.exe

windows10-2004-x64

db84115968...f3.exe

windows10-2004-x64

dce60a71ca...cc.exe

windows10-2004-x64

f5bf417643...17.exe

windows7-x64

f5bf417643...17.exe

windows10-2004-x64

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-05-2024 15:13

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

00dc3a43dda255a61bd370ebbf0fc0431112da3c176a205489b4a2113c396878.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral2

Sample

061669c83be149e85a977dfd41981b6115bf335e8f5bf4a2c696247dbf3999c0.exe

Resource

win10v2004-20240426-en

redline dumud infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

0cc30df7f6ff94fab7858c7361a84798ffe5198fda1df8e7320f4e14124fd535.exe

Resource

win10v2004-20240426-en

privateloader risepro loader persistence stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral4

Sample

1b26ae68f4d9a6a0bfd1a8c92489c6dcdb1a4e6ca483442c2b307329cdfb9345.exe

Resource

win10v2004-20240226-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral5

Sample

3b9256f691d67ac85ae3172971e615fc85a2927279e384650e0e5d73e6201d90.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

3b9256f691d67ac85ae3172971e615fc85a2927279e384650e0e5d73e6201d90.exe

Resource

win10v2004-20240508-en

redline 5345987420 discovery infostealer spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral7

Sample

3ddd80ba692516ca1977cdf6eb25ad59de7b9e87f447a412e2468a77ad1bbd8c.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

3ddd80ba692516ca1977cdf6eb25ad59de7b9e87f447a412e2468a77ad1bbd8c.exe

Resource

win10v2004-20240426-en

redline 5637482599 discovery infostealer spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

3ff55c48fddf370349ae0853c3e33d313791cbfb7239e43b70ad977035a132c7.exe

Resource

win10v2004-20240426-en

redline dumud infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

50be51fdd59dbf4ac078600bca6c8481f0e5baf0010085e6e0ce8d763e87da4b.exe

Resource

win10v2004-20240508-en

amadey healer redline krast dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral11

Sample

565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

5f157bb7f5af6f00c288774953e6950cbcecbf52dfbf7a910b167c511b237980.exe

Resource

win10v2004-20240426-en

healer redline mihan dropper evasion infostealer persistence trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral14

Sample

6c066f3c43054e87d83f1b9983162f080d1fb4f01c5d81ac389dad5406dc5119.exe

Resource

win10v2004-20240226-en

healer redline masha dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral15

Sample

8355a17b5fec607c779bf1f01bc6596fc82dd876042977ec7aba895db3f1faac.exe

Resource

win10v2004-20240426-en

healer redline mihan dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

9a3f5d3f84858840f8bdd8879b66a6c1ccb772e507f7f09dfe1c5a88e2d33db2.exe

Resource

win10v2004-20240508-en

amadey healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral17

Sample

ae66f2f0715075257fd7cda872646950fd845087e7735d1171fc72267d7c4707.exe

Resource

win10v2004-20240508-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral18

Sample

b0fef95ff5abebcb9510c61f55646bd6731822877d3e350e98dcbd957727547c.exe

Resource

win10v2004-20240508-en

redline dumud infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral19

Sample

b11b1b57a3bb5f7ea58bd5b191ab3813432fcc41e7f4e321fa61b848d8c86606.exe

Resource

win10v2004-20240426-en

healer redline kira dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral20

Sample

cd9de412cda28c677351594338bc352dbcafb8652328624f624263b71bac3604.exe

Resource

win7-20240221-en

redline lamp infostealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

cd9de412cda28c677351594338bc352dbcafb8652328624f624263b71bac3604.exe

Resource

win10v2004-20240426-en

redline lamp infostealer

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

db8411596845ee0bb667106c06caf801537d732f8726ab81f03248be803038f3.exe

Resource

win10v2004-20240426-en

healer redline mihan dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral23

Sample

dce60a71ca88a61a579b58be67a969e9f1f6620feaff4c7102883b680d0162cc.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

f5bf4176434a177447cba0b0c44a2aa84c6964ac958276a5f3d28429824e6a17.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

f5bf4176434a177447cba0b0c44a2aa84c6964ac958276a5f3d28429824e6a17.exe

Resource

win10v2004-20240508-en

redline 581694481 discovery infostealer spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Report Analysis Logs

General

Target

565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4.exe
Size

309KB
MD5

cb6e6dd23036d3e9c3fd6fcc4e12690f
SHA1

4a5ef41dca4f37163bec679914d69cf895069c51
SHA256

565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4
SHA512

cd8004da2fe9d31748171b180aab8d2d650f08ab57e8f08d748db120dbd10730a6ad2bba28618501cc1dad2f175084df0f44db0f0a002d9124832c8ae45031aa
SSDEEP

6144:P6hm2uPpiUxyd2eVps3AzNsNkZ8+cxdj91FtG0UyfvVR7/I:Sm2uPpit6eNsN08+oz/FUy3VR7I

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4.exe
"C:\Users\Admin\AppData\Local\Temp\565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4.exe"
1⤵
PID:2712

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads