Extracted

Extracted

• • Target

    8f7ab2495325386f3535c0276c6211485d6359abb0971e63e17c62d9a21a385c

  • Size

    271KB

  • MD5

    f7643597105d906ca1ce53c17522e90b

  • SHA1

    20bbd3fa0f1fed5427c6b4af0f15b8a6970be7d0

  • SHA256

    8f7ab2495325386f3535c0276c6211485d6359abb0971e63e17c62d9a21a385c

  • SHA512

    30c302452e84a9f378aeac53f7a5d580c9ad1611875fe2846d35ef19a9885d4bfbec6adfb1df5487a5c51c1859617a9911fdd3101aba939b6b2a0d9366682219

  • SSDEEP

    6144:XSf+YnC4vMN5FE+u3ONErX8KdwG0iga3wVfg:XcBMN5FE+AOir9xp

  Score

  10^/10

  danabotredlinesmokeloaderinsmixbackdoorbankerinfostealertrojan

  • Danabot

    Danabot is a modular banking Trojan that has been linked with other malware.

    trojanbankerdanabot

  • Detects Smokeloader packer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  behavioral1