General
-
Target
f070751139172ca179cbd7a0854662cf27fb4ca216c73a6c53d50a49a37bc23a
-
Size
258KB
-
Sample
220625-jj7ftabfdn
-
MD5
ddc657bf8e42b36b844bf54302ee01a5
-
SHA1
150040b2de42db56d131579df1601b2c8fcee60e
-
SHA256
f070751139172ca179cbd7a0854662cf27fb4ca216c73a6c53d50a49a37bc23a
-
SHA512
ca7a3c49ec286a24f6e79d062b0cdccdb75dbe5e4bfed3a9d3e4fb10e5cb80782078be13ad318e81752dd5c14b828bbbf54c0995a43f88ea030483f36aa37821
Static task
static1
Behavioral task
behavioral1
Sample
f070751139172ca179cbd7a0854662cf27fb4ca216c73a6c53d50a49a37bc23a.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
f070751139172ca179cbd7a0854662cf27fb4ca216c73a6c53d50a49a37bc23a.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
smokeloader
2018
http://ghjk78kjhb.net/
http://cleancleankkl.net/
http://dunujilis11r.net/
http://sulionuili1.in/
http://eseruuynli2.net/
http://nulikuliey.net/
http://oohdojssks9uf.net/
Targets
-
-
Target
f070751139172ca179cbd7a0854662cf27fb4ca216c73a6c53d50a49a37bc23a
-
Size
258KB
-
MD5
ddc657bf8e42b36b844bf54302ee01a5
-
SHA1
150040b2de42db56d131579df1601b2c8fcee60e
-
SHA256
f070751139172ca179cbd7a0854662cf27fb4ca216c73a6c53d50a49a37bc23a
-
SHA512
ca7a3c49ec286a24f6e79d062b0cdccdb75dbe5e4bfed3a9d3e4fb10e5cb80782078be13ad318e81752dd5c14b828bbbf54c0995a43f88ea030483f36aa37821
Score10/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-