Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target

    0x00060000000231e3-91.dat

  • Size

    37KB

  • MD5

    d05aba3eac0c3fdac92b956c673a9768

  • SHA1

    21877db89a84bf70abc60551382674f81c499538

  • SHA256

    2298f3dc6529ed8b233e20a3a6c009e86a898930ffc394dd743bb7b6d5a43274

  • SHA512

    e340610c2af3b7b314b26624104e5c7f46abf540c14a0fa72a97a115af6c39f24e22496288967dea951a1c9ab4b2a9609b163f99a1f825880c3219cf58574e83

  • SSDEEP

    768:d8n3N4JRqwg8UTB+8zx70f0PSuopLwlFFWO7:dmN4JRrg8ypxSKFFX

  Score

  10^/10

  eternityredlinesmokeloader@oleh_pslivetrafficup3backdoorevasioninfostealertrojan

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Modifies Windows Firewall

    evasion

  • Deletes itself

  • Executes dropped EXE

  behavioral1behavioral2