General
-
Target
ee6b1ceacf3593dbe01ceaae5ccc142e550364942620b19c4eb28b2bae9c0ce0
-
Size
196KB
-
Sample
220924-nsm6rabbg6
-
MD5
90be379aa0441e725bb29d92c44fd4af
-
SHA1
050c01ddd6adef29a4ede3ed371a8f79d0ebc469
-
SHA256
ee6b1ceacf3593dbe01ceaae5ccc142e550364942620b19c4eb28b2bae9c0ce0
-
SHA512
6ec6e77d11d183805ddc96ceb755ce0dc273e4309acb52bb285e5a55746fd55c83ce025ad244c41b650ac3a20bcd0c0f15959c9bc4c0c42de25d468a763dd570
-
SSDEEP
3072:z+vTRLQdW4vb5XbBIYrU2x065w3c8H3yBTOR/Pka4x:OLl4xVNrdx0cQ3/
Static task
static1
Behavioral task
behavioral1
Sample
ee6b1ceacf3593dbe01ceaae5ccc142e550364942620b19c4eb28b2bae9c0ce0.exe
Resource
win10-20220812-en
Malware Config
Extracted
danabot
198.15.112.179:443
185.62.56.245:443
153.92.223.225:443
192.119.70.159:443
-
embedded_hash
6618C163D57D6441FCCA65D86C4D380D
-
type
loader
Targets
-
-
Target
ee6b1ceacf3593dbe01ceaae5ccc142e550364942620b19c4eb28b2bae9c0ce0
-
Size
196KB
-
MD5
90be379aa0441e725bb29d92c44fd4af
-
SHA1
050c01ddd6adef29a4ede3ed371a8f79d0ebc469
-
SHA256
ee6b1ceacf3593dbe01ceaae5ccc142e550364942620b19c4eb28b2bae9c0ce0
-
SHA512
6ec6e77d11d183805ddc96ceb755ce0dc273e4309acb52bb285e5a55746fd55c83ce025ad244c41b650ac3a20bcd0c0f15959c9bc4c0c42de25d468a763dd570
-
SSDEEP
3072:z+vTRLQdW4vb5XbBIYrU2x065w3c8H3yBTOR/Pka4x:OLl4xVNrdx0cQ3/
Score10/10-
Detects Smokeloader packer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Deletes itself
-