dd49e60a45e3962b98b32d0ae9a1256ae1e60ba2b696a005fe221e32f96d996b

Submit
Reports

Overview

overview

Static

static

00dc3a43dd...78.exe

windows10-2004-x64

061669c83b...c0.exe

windows10-2004-x64

0cc30df7f6...35.exe

windows10-2004-x64

1b26ae68f4...45.exe

windows10-2004-x64

3b9256f691...90.exe

windows7-x64

3b9256f691...90.exe

windows10-2004-x64

3ddd80ba69...8c.exe

windows7-x64

3ddd80ba69...8c.exe

windows10-2004-x64

3ff55c48fd...c7.exe

windows10-2004-x64

50be51fdd5...4b.exe

windows10-2004-x64

565e580e21...f4.exe

windows7-x64

565e580e21...f4.exe

windows10-2004-x64

5f157bb7f5...80.exe

windows10-2004-x64

6c066f3c43...19.exe

windows10-2004-x64

8355a17b5f...ac.exe

windows10-2004-x64

9a3f5d3f84...b2.exe

windows10-2004-x64

ae66f2f071...07.exe

windows10-2004-x64

b0fef95ff5...7c.exe

windows10-2004-x64

b11b1b57a3...06.exe

windows10-2004-x64

cd9de412cd...04.exe

windows7-x64

cd9de412cd...04.exe

windows10-2004-x64

db84115968...f3.exe

windows10-2004-x64

dce60a71ca...cc.exe

windows10-2004-x64

f5bf417643...17.exe

windows7-x64

f5bf417643...17.exe

windows10-2004-x64

Analysis

max time kernel
0s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
10-05-2024 15:13

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

00dc3a43dda255a61bd370ebbf0fc0431112da3c176a205489b4a2113c396878.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral2

Sample

061669c83be149e85a977dfd41981b6115bf335e8f5bf4a2c696247dbf3999c0.exe

Resource

win10v2004-20240426-en

redline dumud infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

0cc30df7f6ff94fab7858c7361a84798ffe5198fda1df8e7320f4e14124fd535.exe

Resource

win10v2004-20240426-en

privateloader risepro loader persistence stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral4

Sample

1b26ae68f4d9a6a0bfd1a8c92489c6dcdb1a4e6ca483442c2b307329cdfb9345.exe

Resource

win10v2004-20240226-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral5

Sample

3b9256f691d67ac85ae3172971e615fc85a2927279e384650e0e5d73e6201d90.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

3b9256f691d67ac85ae3172971e615fc85a2927279e384650e0e5d73e6201d90.exe

Resource

win10v2004-20240508-en

redline 5345987420 discovery infostealer spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral7

Sample

3ddd80ba692516ca1977cdf6eb25ad59de7b9e87f447a412e2468a77ad1bbd8c.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

3ddd80ba692516ca1977cdf6eb25ad59de7b9e87f447a412e2468a77ad1bbd8c.exe

Resource

win10v2004-20240426-en

redline 5637482599 discovery infostealer spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

3ff55c48fddf370349ae0853c3e33d313791cbfb7239e43b70ad977035a132c7.exe

Resource

win10v2004-20240426-en

redline dumud infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

50be51fdd59dbf4ac078600bca6c8481f0e5baf0010085e6e0ce8d763e87da4b.exe

Resource

win10v2004-20240508-en

amadey healer redline krast dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral11

Sample

565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

565e580e2113d8503456c9416021bb7200f7fedadd8020c6d19340c32be7e1f4.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

5f157bb7f5af6f00c288774953e6950cbcecbf52dfbf7a910b167c511b237980.exe

Resource

win10v2004-20240426-en

healer redline mihan dropper evasion infostealer persistence trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral14

Sample

6c066f3c43054e87d83f1b9983162f080d1fb4f01c5d81ac389dad5406dc5119.exe

Resource

win10v2004-20240226-en

healer redline masha dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral15

Sample

8355a17b5fec607c779bf1f01bc6596fc82dd876042977ec7aba895db3f1faac.exe

Resource

win10v2004-20240426-en

healer redline mihan dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

9a3f5d3f84858840f8bdd8879b66a6c1ccb772e507f7f09dfe1c5a88e2d33db2.exe

Resource

win10v2004-20240508-en

amadey healer redline nasa dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral17

Sample

ae66f2f0715075257fd7cda872646950fd845087e7735d1171fc72267d7c4707.exe

Resource

win10v2004-20240508-en

amadey healer redline lande dropper evasion infostealer persistence trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral18

Sample

b0fef95ff5abebcb9510c61f55646bd6731822877d3e350e98dcbd957727547c.exe

Resource

win10v2004-20240508-en

redline dumud infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral19

Sample

b11b1b57a3bb5f7ea58bd5b191ab3813432fcc41e7f4e321fa61b848d8c86606.exe

Resource

win10v2004-20240426-en

healer redline kira dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral20

Sample

cd9de412cda28c677351594338bc352dbcafb8652328624f624263b71bac3604.exe

Resource

win7-20240221-en

redline lamp infostealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

cd9de412cda28c677351594338bc352dbcafb8652328624f624263b71bac3604.exe

Resource

win10v2004-20240426-en

redline lamp infostealer

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

db8411596845ee0bb667106c06caf801537d732f8726ab81f03248be803038f3.exe

Resource

win10v2004-20240426-en

healer redline mihan dropper evasion infostealer persistence trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral23

Sample

dce60a71ca88a61a579b58be67a969e9f1f6620feaff4c7102883b680d0162cc.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

f5bf4176434a177447cba0b0c44a2aa84c6964ac958276a5f3d28429824e6a17.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

f5bf4176434a177447cba0b0c44a2aa84c6964ac958276a5f3d28429824e6a17.exe

Resource

win10v2004-20240508-en

redline 581694481 discovery infostealer spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Errors

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\dce60a71ca88a61a579b58be67a969e9f1f6620feaff4c7102883b680d0162cc.exe command="C:\Users\Admin\AppData\Local\Temp\dce60a71ca88a61a579b58be67a969e9f1f6620feaff4c7102883b680d0162cc.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

dce60a71ca88a61a579b58be67a969e9f1f6620feaff4c7102883b680d0162cc.exe
Size

3.8MB
MD5

dcbb8546ac03e3ee841683345965b5aa
SHA1

f1200632683ac24499e819d076d999759b6e8c24
SHA256

dce60a71ca88a61a579b58be67a969e9f1f6620feaff4c7102883b680d0162cc
SHA512

964cd4c3c1afcc069c59383e6de2f1d3f1f7fb873bb11c1552dd095529bcf6e6dd2b482a3b9f1862408dc6df15a5beb7d9a5f7bd1cd1e8a787e246fc6da76ed3
SSDEEP

49152:DtLCPo0lVRu6n4Vb/QNM0LZb5H5lK4tM5pRLoPPunS9NYnmJtE82FwIsUCGPdvmI:xSdlVRtngb/kM0LZbpCpi5GnsCw8dV5

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads