Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target

    0x0009000000015f2f-118.dat

  • Size

    37KB

  • MD5

    996237863d95233cfd111dd78289932a

  • SHA1

    6747ceb940678e230977dbc099ba77f3c42261ee

  • SHA256

    4f88c75a87294206a034625faefc4330b00a7d179f34dc7f67c053277b8d2f35

  • SHA512

    5946dbc5672f673e138285bcd716815a80f46ad4ea7e6ae3553094761831754108eb0e8f8ab29d3d5409564c81b426afa5c88647a64396bbc15a539ca842dee6

  • SSDEEP

    768:d8n3N4JRqwg8UTB+8zx70f0PSuopLwlFFWO7:dmN4JRrg8ypxSKFFX

  Score

  10^/10

  eternityredlinesmokeloader@oleh_pslivetrafficup3backdoordiscoveryinfostealerspywarestealertrojangluptebadropperloader

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba payload

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Deletes itself

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2