General
-
Target
6bf0c6ccf573c460133526c35e98bfe2.exe
-
Size
274KB
-
Sample
210412-zv6x2dwsfn
-
MD5
6bf0c6ccf573c460133526c35e98bfe2
-
SHA1
c0da68b5d658e8cae09d040afe556c602b04054a
-
SHA256
643bafce44fec576424c48dbef72072a1d27d33b60e25585d39bdbcffdca22e8
-
SHA512
0cba442b060e3236ac3807a373d239e1a379c193ae9aed5fcdbc8b8b647ca29fa5a863749bdc73c10cd8b060c28354f623a255a09e8423b1e88364cc61eade0a
Static task
static1
Behavioral task
behavioral1
Sample
6bf0c6ccf573c460133526c35e98bfe2.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
6bf0c6ccf573c460133526c35e98bfe2.exe
Resource
win10v20210410
Malware Config
Extracted
smokeloader
2020
http://smbproperty.ru/
http://gmbshop.ru/
http://baksproperty.gov.ug/
http://magistralpsw.ru/
http://mpmanagertzz.ru/
http://powerglasspot.ru/
http://autopartswarehouses.ru/
http://memoloves.ru/
http://alfavanilin.ru/
Targets
-
-
Target
6bf0c6ccf573c460133526c35e98bfe2.exe
-
Size
274KB
-
MD5
6bf0c6ccf573c460133526c35e98bfe2
-
SHA1
c0da68b5d658e8cae09d040afe556c602b04054a
-
SHA256
643bafce44fec576424c48dbef72072a1d27d33b60e25585d39bdbcffdca22e8
-
SHA512
0cba442b060e3236ac3807a373d239e1a379c193ae9aed5fcdbc8b8b647ca29fa5a863749bdc73c10cd8b060c28354f623a255a09e8423b1e88364cc61eade0a
Score10/10-
Deletes itself
-
Loads dropped DLL
-