General
-
Target
19cc2cdc70b17dc119f3447ddba84680b19ba6566a3fc39fa54c6251bb19623c
-
Size
197KB
-
Sample
220924-wql5nsbgb2
-
MD5
58f02242f64d9710d78288ab73465a6f
-
SHA1
eab3d8b9986206819c80b40aef7b15a46e1781fd
-
SHA256
19cc2cdc70b17dc119f3447ddba84680b19ba6566a3fc39fa54c6251bb19623c
-
SHA512
e54af000eb4dca04e12e75e3aa1dc9edf50da168713e056038b1fac12e234666802b71ddb3dbd28ddeb62182f933c74638a1222ff3c29789da993be639a7afff
-
SSDEEP
3072:vAIsMEcLfZ4UFrBA5ul+OOtte1hekcdbxe2nSflehKBQ0ZT/Pkk4x:LrLflFrroOiteuxtSflgzw
Static task
static1
Behavioral task
behavioral1
Sample
19cc2cdc70b17dc119f3447ddba84680b19ba6566a3fc39fa54c6251bb19623c.exe
Resource
win10-20220812-en
Malware Config
Extracted
danabot
198.15.112.179:443
185.62.56.245:443
153.92.223.225:443
192.119.70.159:443
-
embedded_hash
6618C163D57D6441FCCA65D86C4D380D
-
type
loader
Targets
-
-
Target
19cc2cdc70b17dc119f3447ddba84680b19ba6566a3fc39fa54c6251bb19623c
-
Size
197KB
-
MD5
58f02242f64d9710d78288ab73465a6f
-
SHA1
eab3d8b9986206819c80b40aef7b15a46e1781fd
-
SHA256
19cc2cdc70b17dc119f3447ddba84680b19ba6566a3fc39fa54c6251bb19623c
-
SHA512
e54af000eb4dca04e12e75e3aa1dc9edf50da168713e056038b1fac12e234666802b71ddb3dbd28ddeb62182f933c74638a1222ff3c29789da993be639a7afff
-
SSDEEP
3072:vAIsMEcLfZ4UFrBA5ul+OOtte1hekcdbxe2nSflehKBQ0ZT/Pkk4x:LrLflFrroOiteuxtSflgzw
Score10/10-
Detects Smokeloader packer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Deletes itself
-