Extracted

Extracted

• • Target
    9cb0f10770d10bb5fe00d502dfa9a754.exe
  • Size 274KB
  • SHA256 1d56c98200907afafa8a54f802c21ed824e1827162fb19d8f73cf8a8bb61b7f2
  • MD5 9cb0f10770d10bb5fe00d502dfa9a754
  • SHA1 b7d7cf699d6a43c631c6b3065e4f50d70e7a8179
  • SHA512 b3e7f42da697f16efb8e42896c30d53250ef1423f51d5f6a29c575b7bffe90906bbfbd9061f701cc71dec7d157ba61eddcc0fb460b630cd012dff198aa552bc9
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinesmokeloaderbackdoorinfostealertrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2