General
-
Target
8ec188a34196eadd33a1353bd5cf70b95b7e4a28fde56ba48c5dd00fe5a57499
-
Size
196KB
-
Sample
220924-mq1tdsbbc3
-
MD5
c1bbd6b74c11938202298ec36a11320c
-
SHA1
5d36b44543d4663bf61ff65979f9e0a7e7e31323
-
SHA256
8ec188a34196eadd33a1353bd5cf70b95b7e4a28fde56ba48c5dd00fe5a57499
-
SHA512
b7c122c03baa63317e1d7c536dc7149af604d5a359bea703f479c60ae48909e3cba74618592411e601b3d7ccdee90e24454750b5b4fa0a0389fef23a32b7183a
-
SSDEEP
3072:CZAZLrgL5i685euyrgxSUTg8++jh54qBz5powy3/Pka4x:rL45iLe+vTguFD
Static task
static1
Behavioral task
behavioral1
Sample
8ec188a34196eadd33a1353bd5cf70b95b7e4a28fde56ba48c5dd00fe5a57499.exe
Resource
win10-20220812-en
Malware Config
Extracted
danabot
198.15.112.179:443
185.62.56.245:443
153.92.223.225:443
192.119.70.159:443
-
embedded_hash
6618C163D57D6441FCCA65D86C4D380D
-
type
loader
Targets
-
-
Target
8ec188a34196eadd33a1353bd5cf70b95b7e4a28fde56ba48c5dd00fe5a57499
-
Size
196KB
-
MD5
c1bbd6b74c11938202298ec36a11320c
-
SHA1
5d36b44543d4663bf61ff65979f9e0a7e7e31323
-
SHA256
8ec188a34196eadd33a1353bd5cf70b95b7e4a28fde56ba48c5dd00fe5a57499
-
SHA512
b7c122c03baa63317e1d7c536dc7149af604d5a359bea703f479c60ae48909e3cba74618592411e601b3d7ccdee90e24454750b5b4fa0a0389fef23a32b7183a
-
SSDEEP
3072:CZAZLrgL5i685euyrgxSUTg8++jh54qBz5powy3/Pka4x:rL45iLe+vTguFD
Score10/10-
Detects Smokeloader packer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Deletes itself
-