Extracted

• • Target

    d7b947c8f4365722e24b430542fb015c86d7dafc180e300279e9742e4f6fe8ae

  • Size

    402KB

  • MD5

    d2d72ee4be8307cd762ed69797ded0fd

  • SHA1

    be578c8677e04be3d31b82987afbdcf5cbbd4fc8

  • SHA256

    d7b947c8f4365722e24b430542fb015c86d7dafc180e300279e9742e4f6fe8ae

  • SHA512

    052dd0803fcdfd96b8671193f03279a5a62dedb8ff245fc4ac48c546fe533b7501e378b76520e85a6ca6bc0958568843729d45b818027b2d0a057d8e6b7a5935

  • SSDEEP

    6144:kKEQMaOytRAv9YJGthuNEFoAO+RdTt82OqJ5tAu/YO93Io:kdQHO8RAv9YXmFt82O25tx/0

  Score

  10^/10

  redlinefurgainfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  behavioral1behavioral2

• • Target

    d9c96b2b7c433fb567d6a5f3abca5c6ada92682bd759f48638d0b6d3cf43ce45

  • Size

    86KB

  • MD5

    7fff6d0a3cdbf7320ab4f7a378c92c85

  • SHA1

    de363c54132e4276e51d6a15f95b9e157aa98592

  • SHA256

    d9c96b2b7c433fb567d6a5f3abca5c6ada92682bd759f48638d0b6d3cf43ce45

  • SHA512

    cb3aef588e122b0da6efb4d3e730cd3b1a4967591919d25469e20ae8748991007531ed3bf24bb73adb73f6919ff8a6151056b116d46be3229bfa10f1faf89a3b

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73t6MlYqn+jMp9jXX8:ymb3NkkiQ3mdBjFo73tvn+Yp9jn8

  Score

  10^/10

  blackmoonbankertrojanupx

  • Blackmoon, KrBanker

    Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    trojanbankerblackmoon

  • Detect Blackmoon payload

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral3behavioral4