Extracted

Extracted

Extracted

• • Target

    file.exe

  • Size

    249KB

  • MD5

    88976fa95d5f638343755c86067550b6

  • SHA1

    9d83f005173bd672087d2bd2be9a9533fa97ce75

  • SHA256

    fa2c8289fb1a7c26774c74f39391df7a68c06f7b2e1aba9f722d8b30fcc5be97

  • SHA512

    0e28cf7e3d8fa981bce1faf422a3f3eb6bd4313540236d50e8b0453bec5d976fa08c1fb5248789bbd2e2174de3d2f3d1c5f32248c3cccb7c4ff84c1b141fbed4

  • SSDEEP

    3072:/DqCDXwLvmHW2oUb1rml9dhYx06u7SaM8HTKtzWvl53brYsejg:LDXwLvPLgRmDspWSaHFvYsd

  Score

  10^/10

  smokeloaderpub4backdoortrojanredlinefronx2discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2