General
-
Target
3e8e4989ef8a5d1b78bd13057bdb7b479b7d5491d72ead5ce4220eba3ff4d068
-
Size
167KB
-
Sample
220624-2gyd8sffbn
-
MD5
77e51b7fa83595cf39456c3a162a4128
-
SHA1
7c73b30d51a2969cc37b069c34ecefc11bde9c67
-
SHA256
3e8e4989ef8a5d1b78bd13057bdb7b479b7d5491d72ead5ce4220eba3ff4d068
-
SHA512
da0b9c71bef360edafd198d2d4f37d4d908db154f831c0f6601b949e6ef312ea01ed257c3aaed611e0fcd5ee1620a43c87540d76d344748457a55ab034d47350
Static task
static1
Behavioral task
behavioral1
Sample
3e8e4989ef8a5d1b78bd13057bdb7b479b7d5491d72ead5ce4220eba3ff4d068.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3e8e4989ef8a5d1b78bd13057bdb7b479b7d5491d72ead5ce4220eba3ff4d068.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
smokeloader
2018
http://ghjk78kjhb.net/
http://cleancleankkl.net/
http://dunujilis11r.net/
http://sulionuili1.in/
http://eseruuynli2.net/
http://nulikuliey.net/
http://oohdojssks9uf.net/
Targets
-
-
Target
3e8e4989ef8a5d1b78bd13057bdb7b479b7d5491d72ead5ce4220eba3ff4d068
-
Size
167KB
-
MD5
77e51b7fa83595cf39456c3a162a4128
-
SHA1
7c73b30d51a2969cc37b069c34ecefc11bde9c67
-
SHA256
3e8e4989ef8a5d1b78bd13057bdb7b479b7d5491d72ead5ce4220eba3ff4d068
-
SHA512
da0b9c71bef360edafd198d2d4f37d4d908db154f831c0f6601b949e6ef312ea01ed257c3aaed611e0fcd5ee1620a43c87540d76d344748457a55ab034d47350
Score10/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-