General
-
Target
f3bf887159da411617802401a2717d87c35da3154ce52dafc810c56e11e2a483
-
Size
149KB
-
Sample
220625-nbr4dahhbq
-
MD5
cfc21859ce2755999865f9ab8268131a
-
SHA1
2cb310b57b6d27125270af16b2cde9940088c052
-
SHA256
f3bf887159da411617802401a2717d87c35da3154ce52dafc810c56e11e2a483
-
SHA512
1a6a953dbb4069ef9315fa2e010f893854273628e735fe4453df8a9dc33e4584c8c0d3f4c8d080a488da7f6fc4f544e7745dc574d8762b4a9ab96b39dabe3a14
Static task
static1
Behavioral task
behavioral1
Sample
f3bf887159da411617802401a2717d87c35da3154ce52dafc810c56e11e2a483.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
f3bf887159da411617802401a2717d87c35da3154ce52dafc810c56e11e2a483.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
smokeloader
2018
http://ghjk78kjhb.net/
http://cleancleankkl.net/
http://dunujilis11r.net/
http://sulionuili1.in/
http://eseruuynli2.net/
http://nulikuliey.net/
http://oohdojssks9uf.net/
Targets
-
-
Target
f3bf887159da411617802401a2717d87c35da3154ce52dafc810c56e11e2a483
-
Size
149KB
-
MD5
cfc21859ce2755999865f9ab8268131a
-
SHA1
2cb310b57b6d27125270af16b2cde9940088c052
-
SHA256
f3bf887159da411617802401a2717d87c35da3154ce52dafc810c56e11e2a483
-
SHA512
1a6a953dbb4069ef9315fa2e010f893854273628e735fe4453df8a9dc33e4584c8c0d3f4c8d080a488da7f6fc4f544e7745dc574d8762b4a9ab96b39dabe3a14
Score10/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-