Extracted

Extracted

• • Target

    97d6b1252c76acc7ed9bdda30b7824a2aaf64fd6a586a1818bfaf2104e277c2f

  • Size

    182KB

  • MD5

    1168d3b5014173d770bb46743876d712

  • SHA1

    fde7c3dbe926007a20f030e67b39d90267c769b2

  • SHA256

    97d6b1252c76acc7ed9bdda30b7824a2aaf64fd6a586a1818bfaf2104e277c2f

  • SHA512

    d0b57e33a795ce6d197c153353bc50f5ece25f367d7542c2bc6002a87537e134941f3166aa988ec89c9106f693eec82e2f76291d1a19f8cb4b7bc7bf4c853606

  Score

  10^/10

  redlinesmokeloadersystembcbackdoorinfostealersuricatatrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

    suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

    suricata

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1