Extracted

Extracted

• • Target

    a6944f5e05e82adbaa5a356d3c68d1220c5c5eafa59e63fb74a1ffd01fffb9cf

  • Size

    294KB

  • MD5

    b08113b4900c0dd2b07f6bcd0aaeac51

  • SHA1

    021b2cc5d7f0b1287e432a0a8e4ee5718f87b25e

  • SHA256

    a6944f5e05e82adbaa5a356d3c68d1220c5c5eafa59e63fb74a1ffd01fffb9cf

  • SHA512

    46616aa81189aaa63f34db097cec53dcf09aad8490e35cddf877ec86aff710d2b0cb1db3ed0742bab0a0f77e546d715268420953f31000c851933f5930d5cc1b

  • SSDEEP

    6144:FaO7eL5iJLhraid4EVNjk0cClvJGJigavwVfIx:FCMJZaM1LbRx

  Score

  10^/10

  danabotredlinesmokeloaderinsmixbackdoorbankerinfostealertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Detects Smokeloader packer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  behavioral1