General
-
Target
0b05811b10c10e43491123571a34ca96b75161d0482f6e408e2c0e9b43e7b464
-
Size
196KB
-
Sample
220924-sls6mscggr
-
MD5
b9f1f39df55ba02ceadb11baef363fc5
-
SHA1
18df2b8dcc45f0d815a0c73e4290bb690eb2dc72
-
SHA256
0b05811b10c10e43491123571a34ca96b75161d0482f6e408e2c0e9b43e7b464
-
SHA512
2a5aa8b043e40b205dc4eb0a032c720d21c8594b428519d70ab0593150535c296309cd28c7a704213eecf82a05cb7a7f8f0048cdd5f1a8c0eeb39da53be0e7a9
-
SSDEEP
3072:V8XQLeNbQab5RRb51+mAr7c89aswBUGAjd6/Pkk4x:tLaQcHAXcihGu
Static task
static1
Behavioral task
behavioral1
Sample
0b05811b10c10e43491123571a34ca96b75161d0482f6e408e2c0e9b43e7b464.exe
Resource
win10-20220812-en
Malware Config
Extracted
danabot
198.15.112.179:443
185.62.56.245:443
153.92.223.225:443
192.119.70.159:443
-
embedded_hash
6618C163D57D6441FCCA65D86C4D380D
-
type
loader
Targets
-
-
Target
0b05811b10c10e43491123571a34ca96b75161d0482f6e408e2c0e9b43e7b464
-
Size
196KB
-
MD5
b9f1f39df55ba02ceadb11baef363fc5
-
SHA1
18df2b8dcc45f0d815a0c73e4290bb690eb2dc72
-
SHA256
0b05811b10c10e43491123571a34ca96b75161d0482f6e408e2c0e9b43e7b464
-
SHA512
2a5aa8b043e40b205dc4eb0a032c720d21c8594b428519d70ab0593150535c296309cd28c7a704213eecf82a05cb7a7f8f0048cdd5f1a8c0eeb39da53be0e7a9
-
SSDEEP
3072:V8XQLeNbQab5RRb51+mAr7c89aswBUGAjd6/Pkk4x:tLaQcHAXcihGu
Score10/10-
Detects Smokeloader packer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Deletes itself
-