Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target

    0x0007000000015c5e-121.dat

  • Size

    37KB

  • MD5

    57df87898b1d24fdb814deb03a0f299e

  • SHA1

    51c1bc099df92143888371c2e6e0322e7c370ee4

  • SHA256

    27f1141ef0567cd7cea9a4c45dccb6954950a1413cd075e1156577b5d3edc741

  • SHA512

    3b1d5634df89e90f5765a3f4fc05767a55d48e7623f3ec78587359056f27cff2891829de261cf3b51a332d33465be6697c48d2d9b44d3f48b1f5602e9158b9a6

  • SSDEEP

    768:d8n3N4JRqwg8UTB+8zx70f0PSuopLwlFFWO7:dmN4JRrg8ypxSKFFX

  Score

  10^/10

  eternityredlinesmokeloader@oleh_pslivetrafficup3backdoorevasioninfostealerspywarestealertrojan

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Modifies Windows Firewall

    evasion

  • Deletes itself

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2