General
-
Target
870902ca16aade54d1548f5fc65e581a138948cc0ebc57e0d88653e1c1c1487f
-
Size
226KB
-
Sample
220625-v5751sdfgl
-
MD5
e8647434c5bd0a5bbe0a20c5d69f3212
-
SHA1
9fcebe98c641389db302ede2b81de793bcde12a7
-
SHA256
870902ca16aade54d1548f5fc65e581a138948cc0ebc57e0d88653e1c1c1487f
-
SHA512
36926df0ca70c277751098b07ba155ac86f1044f7e823088c8e61dde765692232a6a86f692f3023a4c55aee05680d2f90d6d91ce8e0b406bdd7e9142e5474f30
Static task
static1
Behavioral task
behavioral1
Sample
870902ca16aade54d1548f5fc65e581a138948cc0ebc57e0d88653e1c1c1487f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
870902ca16aade54d1548f5fc65e581a138948cc0ebc57e0d88653e1c1c1487f.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
smokeloader
2018
http://ghjk78kjhb.net/
http://cleancleankkl.net/
http://dunujilis11r.net/
http://sulionuili1.in/
http://eseruuynli2.net/
http://nulikuliey.net/
http://oohdojssks9uf.net/
Targets
-
-
Target
870902ca16aade54d1548f5fc65e581a138948cc0ebc57e0d88653e1c1c1487f
-
Size
226KB
-
MD5
e8647434c5bd0a5bbe0a20c5d69f3212
-
SHA1
9fcebe98c641389db302ede2b81de793bcde12a7
-
SHA256
870902ca16aade54d1548f5fc65e581a138948cc0ebc57e0d88653e1c1c1487f
-
SHA512
36926df0ca70c277751098b07ba155ac86f1044f7e823088c8e61dde765692232a6a86f692f3023a4c55aee05680d2f90d6d91ce8e0b406bdd7e9142e5474f30
Score10/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-