General
-
Target
fm6t2.zip
-
Size
146KB
-
Sample
210417-14hwbdzs62
-
MD5
c189bddce15a0b1c31effd66508e5424
-
SHA1
01eb10978c4d4b37543b6b10f180d36468ef5981
-
SHA256
49d9ed9df2b18b54f4ba6bad011e22c4af0f96e0390390552b9b482fbd28fe1d
-
SHA512
ef305438bc8b466954f79798cf57e4969d05742214cb22ca8934a24f564918219d61c7bbf9f16a393fd6c68cabfe97fbb82bd340447b111e184f8654dd2913c7
Static task
static1
Behavioral task
behavioral1
Sample
fm6t2.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
fm6t2.exe
Resource
win10v20210410
Malware Config
Extracted
smokeloader
2020
http://etasuklavish.today/
http://mragyzmachnobesdi.today/
http://kimchinikuzims.today/
http://slacvostinrius.today/
http://straponuliusyn.today/
http://grammmdinss.today/
http://viprasputinsd.chimkent.su/
http://lupadypa.dagestan.su/
http://stoknolimchin.exnet.su/
http://musaroprovadnikov.live/
http://teemforyourexprensiti.life/
http://stolkgolmishutich.termez.su/
http://roompampamgandish.wtf/
Targets
-
-
Target
fm6t2.exe
-
Size
276KB
-
MD5
69c1c62895726fedc482d2b2f408f8ce
-
SHA1
a6327d2b1e6c0d30681085699aa2290e2e371994
-
SHA256
f8f9e464b8f667a85f7095e9ac4ff80a08a96e5c4765d62b18471b1908bb0109
-
SHA512
de5ebb736d1dc225ca56218538dfc8d27b61f16caa7ebd6a14ff7534b42cee1edecdde43f70524d96f6ecccf1303fba90cff5109375eb8d273fef9df71027ab6
Score10/10-
Deletes itself
-
Loads dropped DLL
-