General
-
Target
0x0006000000015c69-1466.dat
-
Size
37KB
-
Sample
231210-26l3hagbe3
-
MD5
70fe458368724ec513a918b628dc80a9
-
SHA1
ddb1cb2f62175134a941c9e80da4a883ba7e0bf2
-
SHA256
edbb77cc353bf39c1f0658e2711be30347245ab286e067d62578afa8135f9d2c
-
SHA512
b7c4522902d6aa6f5ee2740905ddfba5ed7842ad00a407d16a0936fbc3992029f7f7e0ab2d18fbe6c63f06bdd6f3a847a3b4ca058f1039c3c86d4744db28fcab
-
SSDEEP
768:d8n3N4JRqwg8UTB+8zx70f0PSuopLwlFFWO7:dmN4JRrg8ypxSKFFX
Behavioral task
behavioral1
Sample
0x0006000000015c69-1466.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0x0006000000015c69-1466.exe
Resource
win10v2004-20231201-en
Malware Config
Extracted
smokeloader
2022
http://81.19.131.34/fks/index.php
Extracted
redline
LiveTraffic
77.105.132.87:6731
Extracted
redline
@oleh_ps
176.123.7.190:32927
Extracted
eternity
47vk9PbPuHnEnazCn4tLpwPCWRLSMhpX9PD8WqpjchhTXisimD6j8EvRFDbPQHKUmHVq3vAM3DLytXLg8CqcdRXRFdPe92Q
-
payload_urls
https://raw.githubusercontent.com/VolVeRFM/SilentMiner-VolVeR/main/VolVeRBuilder/Resources/xmrig.exe
Targets
-
-
Target
0x0006000000015c69-1466.dat
-
Size
37KB
-
MD5
70fe458368724ec513a918b628dc80a9
-
SHA1
ddb1cb2f62175134a941c9e80da4a883ba7e0bf2
-
SHA256
edbb77cc353bf39c1f0658e2711be30347245ab286e067d62578afa8135f9d2c
-
SHA512
b7c4522902d6aa6f5ee2740905ddfba5ed7842ad00a407d16a0936fbc3992029f7f7e0ab2d18fbe6c63f06bdd6f3a847a3b4ca058f1039c3c86d4744db28fcab
-
SSDEEP
768:d8n3N4JRqwg8UTB+8zx70f0PSuopLwlFFWO7:dmN4JRrg8ypxSKFFX
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Downloads MZ/PE file
-
Deletes itself
-
Executes dropped EXE
-