Extracted

Extracted

• • Target

    b24ef80de413285aa22eeaffca8b002e.exe

  • Size

    4.3MB

  • MD5

    b24ef80de413285aa22eeaffca8b002e

  • SHA1

    0a282ec02d4065afa895e9737e0fddcf08e824ae

  • SHA256

    93f3c7749e51bf4699e6a7fd9a8153c67f128e7fb3a2e69321ddfb09d064f800

  • SHA512

    3174f834b3c58d303cb8849b7ef5e67d090bbd94786d9e6132c8cb110b89b63d805669b1ad68cb51dd5859d7f00fd1b68f8446fa6f9e0a79fd56aa3a1dd26a51

  • SSDEEP

    49152:je2w+P9xbVSwuXTYbGIggh7GIkeMgz/2rcrCG7r5mdiPt93RLlkuFX:je2wubAzTA8+7n52oV7FNlj

  Score

  10^/10

  eternityredline5555discoveryinfostealerspywarestealerworm

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2