Extracted

Extracted

Extracted

• • Target
    e348eacf82901caa56f47736b3acaba9.exe
  • Size 219KB
  • SHA256 21947e9b48daa1bd000e165ade4eb930a4fa90614da348e3af08daa76971b293
  • MD5 e348eacf82901caa56f47736b3acaba9
  • SHA1 c01d9d73d4357d15ef2ee0637ef53182af2670e3
  • SHA512 81a100d6d81a8e11b2d6240b65f40728850e2ba05c2c78c6348ddb6da32673b3efa356ff29499d2519d3deb48bd350bf944b36077729063fb53f4c1ebb1f62fd
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoonredlinesmokeloaderddf183af4241e3172885cf1b2c4c1fb4ee03d05asuperstarbackdoorinfostealerstealertrojan

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Suspicious use of NtCreateProcessExOtherParentProcess

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2