General
-
Target
pax. ü 00163-2021.js
-
Size
66KB
-
Sample
210420-p2b3waqmpe
-
MD5
0819eda4c8a833cb2ffd5c4f2a297fdc
-
SHA1
8b64c307ac3ae0e55ebc879528188257f16d2c80
-
SHA256
caabe0aa3bf3d3ffb2e90fde81869aeed004bf6f9f5182e43069e648f44df4a0
-
SHA512
270c3dec904d5f8eb1bbaeb9b5c497076953f39e154adf24daf18f36095bd3d59056717ee7e5dab2d0b10dbe67ddcec6db7a0e6357720ce3f1100652e3db5866
Static task
static1
Behavioral task
behavioral1
Sample
pax. ü 00163-2021.js
Resource
win7v20210410
Behavioral task
behavioral2
Sample
pax. ü 00163-2021.js
Resource
win10v20210410
Malware Config
Extracted
smokeloader
2020
http://smbproperty.ru/
http://gmbshop.ru/
http://baksproperty.gov.ug/
http://magistralpsw.ru/
http://mpmanagertzz.ru/
http://powerglasspot.ru/
http://autopartswarehouses.ru/
http://memoloves.ru/
http://alfavanilin.ru/
Targets
-
-
Target
pax. ü 00163-2021.js
-
Size
66KB
-
MD5
0819eda4c8a833cb2ffd5c4f2a297fdc
-
SHA1
8b64c307ac3ae0e55ebc879528188257f16d2c80
-
SHA256
caabe0aa3bf3d3ffb2e90fde81869aeed004bf6f9f5182e43069e648f44df4a0
-
SHA512
270c3dec904d5f8eb1bbaeb9b5c497076953f39e154adf24daf18f36095bd3d59056717ee7e5dab2d0b10dbe67ddcec6db7a0e6357720ce3f1100652e3db5866
Score10/10-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-