General
-
Target
pub3.exe
-
Size
335KB
-
Sample
211024-m94z6aehal
-
MD5
e34cba52b1206c828978872b9338f430
-
SHA1
7b03d09434b98a479c8b3e84a2abf990e3918b93
-
SHA256
3632bc3aa58008650c9633e908804b5db470311e8e6de3a08a8ca598327b2a41
-
SHA512
62ece1d4a19e5572fb2a2af9c9810f56fa95e9449b4133a5ce4635e928c237de48bdac0b480ef70c7a59ba0f287bd409ab618b1e4ffe557b41070a5cd16d1353
Static task
static1
Behavioral task
behavioral1
Sample
pub3.exe
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
pub3.exe
Resource
win10-en-20210920
Malware Config
Extracted
smokeloader
2020
http://directorycart.com/upload/
http://tierzahnarzt.at/upload/
http://streetofcards.com/upload/
http://ycdfzd.com/upload/
http://successcoachceo.com/upload/
http://uhvu.cn/upload/
http://japanarticle.com/upload/
Extracted
icedid
1875681804
enticationmetho.ink
Targets
-
-
Target
pub3.exe
-
Size
335KB
-
MD5
e34cba52b1206c828978872b9338f430
-
SHA1
7b03d09434b98a479c8b3e84a2abf990e3918b93
-
SHA256
3632bc3aa58008650c9633e908804b5db470311e8e6de3a08a8ca598327b2a41
-
SHA512
62ece1d4a19e5572fb2a2af9c9810f56fa95e9449b4133a5ce4635e928c237de48bdac0b480ef70c7a59ba0f287bd409ab618b1e4ffe557b41070a5cd16d1353
-
suricata: ET MALWARE Win32/IcedID Request Cookie
suricata: ET MALWARE Win32/IcedID Request Cookie
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Deletes itself
-
Drops startup file
-
Loads dropped DLL
-