4de1124a0c0b201907321b44ffbad15b2e2e9ad38b6ae1a833ce56f145c5c177

Submit
Reports

Overview

overview

Static

static

13d2ddbb73...3e.exe

windows7-x64

13d2ddbb73...3e.exe

windows10-2004-x64

248f6a88e2...75.exe

windows7-x64

248f6a88e2...75.exe

windows10-2004-x64

3b3c25930d...c3.exe

windows10-2004-x64

5d4ab7321b...b1.exe

windows7-x64

5d4ab7321b...b1.exe

windows10-2004-x64

64a91313eb...f3.exe

windows10-2004-x64

78583cb35f...80.exe

windows10-2004-x64

7adf4e4d30...3b.exe

windows7-x64

7adf4e4d30...3b.exe

windows10-2004-x64

7eeb7d5105...82.exe

windows10-2004-x64

85963051ec...13.exe

windows10-2004-x64

89b66df995...26.exe

windows7-x64

89b66df995...26.exe

windows10-2004-x64

8a339b5ec9...a4.exe

windows10-2004-x64

948537d542...e0.exe

windows7-x64

948537d542...e0.exe

windows10-2004-x64

9aaa505382...5d.exe

windows10-2004-x64

a1fa8776d2...ff.exe

windows10-2004-x64

a4673ac7aa...63.exe

windows7-x64

a4673ac7aa...63.exe

windows10-2004-x64

a6784f4b55...a5.exe

windows10-2004-x64

c81bc7831e...44.exe

windows10-2004-x64

db203dc135...0c.exe

windows7-x64

db203dc135...0c.exe

windows10-2004-x64

efd353ed4e...ec.exe

windows10-2004-x64

Analysis

max time kernel
0s
max time network
8s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
13-05-2024 11:25

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

13d2ddbb73b782f7ef9b539d9c2f99d04cc83536205cbdf01fcfdbda6273b93e.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

13d2ddbb73b782f7ef9b539d9c2f99d04cc83536205cbdf01fcfdbda6273b93e.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral3

Sample

248f6a88e25b649d9173c39e07ca411784d808570bec48e3d3681ea589460f75.exe

Resource

win7-20240419-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

248f6a88e25b649d9173c39e07ca411784d808570bec48e3d3681ea589460f75.exe

Resource

win10v2004-20240508-en

lumma stealer

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

3b3c25930d8e5239354b72caa7636c9cd244db255f2dbdad867a4095441c91c3.exe

Resource

win10v2004-20240508-en

redline debro infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

5d4ab7321bf7b95b30cc71760a54f2de7172103b782fbdbcabcc012561d0f7b1.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

5d4ab7321bf7b95b30cc71760a54f2de7172103b782fbdbcabcc012561d0f7b1.exe

Resource

win10v2004-20240508-en

lumma stealer

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

64a91313eb50dddfb61c52017487fbcae9e2ebfc5426285d97ea6e073db0e1f3.exe

Resource

win10v2004-20240226-en

redline mixa evasion infostealer persistence trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral9

Sample

78583cb35ffed4865b6cde068216b6ee82dff5cb11522d6b1b2e33d713a21f80.exe

Resource

win10v2004-20240426-en

redline debro evasion infostealer persistence trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral10

Sample

7adf4e4d30d94f50091e644399565b03649ebda511d61b6156728120df42193b.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

7adf4e4d30d94f50091e644399565b03649ebda511d61b6156728120df42193b.exe

Resource

win10v2004-20240508-en

redline zgrat discovery infostealer rat spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

7eeb7d5105714891b20ada945a47c8b1144bfe9a5bfd2e9d3e958da52b062182.exe

Resource

win10v2004-20240426-en

redline mixa evasion infostealer persistence trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral13

Sample

85963051ece1830904f1352feb417a21d0483c9ef3735855d49b257c6278df13.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

89b66df995df06c4b63c0874921e1da7192ea6c4fb2f7e991fb3bb68c2c25e26.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

89b66df995df06c4b63c0874921e1da7192ea6c4fb2f7e991fb3bb68c2c25e26.exe

Resource

win10v2004-20240426-en

redline logsdiller cloud (tg: @logsdillabot)discovery infostealer spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

8a339b5ec96af2011a66dc18e1650f9ce31815b69c4d565ca266ff41e286a1a4.exe

Resource

win10v2004-20240426-en

redline debro evasion infostealer persistence trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral17

Sample

948537d5425794f4ef3525416441d129812ac5d9ef9b35f1eacccf6948e60fe0.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

948537d5425794f4ef3525416441d129812ac5d9ef9b35f1eacccf6948e60fe0.exe

Resource

win10v2004-20240508-en

lumma stealer

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

9aaa50538204ad8ed2bed10632de494067e88887268d3beeb1f68815b03b325d.exe

Resource

win10v2004-20240508-en

redline debro evasion infostealer persistence trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral20

Sample

a1fa8776d2234540b4b06a6175a58b01a25370868f808e796d7bcbfdfeacebff.exe

Resource

win10v2004-20240508-en

redline mixa evasion infostealer persistence trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral21

Sample

a4673ac7aa51c8f5ddda3a7edbf21cc12faacbdd4a054ee01df67f27a5332b63.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

a4673ac7aa51c8f5ddda3a7edbf21cc12faacbdd4a054ee01df67f27a5332b63.exe

Resource

win10v2004-20240508-en

redline 5345987420 discovery infostealer spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral23

Sample

a6784f4b550acc54cc3376066858e706933e32e7c275b9b79acf346dc3cd3da5.exe

Resource

win10v2004-20240426-en

redline debro infostealer persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral24

Sample

c81bc7831eb8bf73d67379be4d3b03944fc18873944de10d1e02f9de54dfcc44.exe

Resource

win10v2004-20240426-en

redline mixa evasion infostealer persistence trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral25

Sample

db203dc135d244a9cc17433853b7a56001547d4cad091ced993ce64e9ba1250c.exe

Resource

win7-20240215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

db203dc135d244a9cc17433853b7a56001547d4cad091ced993ce64e9ba1250c.exe

Resource

win10v2004-20240508-en

redline sectoprat @txthead discovery infostealer rat spyware stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral27

Sample

efd353ed4e0d760b81c28296fd5aa7a67776e8b003d5edc1e7479f6efd721dec.exe

Resource

win10v2004-20240508-en

redline debro evasion infostealer persistence trojan

windows10-2004-x64

9 signatures

150 seconds

Errors

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\85963051ece1830904f1352feb417a21d0483c9ef3735855d49b257c6278df13.exe command="C:\Users\Admin\AppData\Local\Temp\85963051ece1830904f1352feb417a21d0483c9ef3735855d49b257c6278df13.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

85963051ece1830904f1352feb417a21d0483c9ef3735855d49b257c6278df13.exe
Size

43.5MB
MD5

9de6a6858482f7b8c82bd861ea974e09
SHA1

772ce6a04f3afed268695f26136337a772c76017
SHA256

85963051ece1830904f1352feb417a21d0483c9ef3735855d49b257c6278df13
SHA512

fd11b2455361204a9cf9d046acc2b379989e11f7b06f0add808bc2219b104ff10b772d708ab64752efbf894c281c486509d8421edebfa8c3be608e02eb8f2c77
SSDEEP

786432:CVTtG42LQOiWTx/iNFcFXBHx+rEpTyfgcRMQS7bYC/vswAdlk1MUOH:CPGFM0RwcFXBHx+wgGV4ydAdxUO

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads