General
-
Target
149c138dda003d584cd2a7e55e0cb17a41de38232a65ba301a82e445916d33bf
-
Size
197KB
-
Sample
220925-ee9cdseder
-
MD5
d49fb57fa2a6edcc4c9e71c36e343cdf
-
SHA1
47fc8cd554918dfb9bd6b943a9b6d93d6e99775d
-
SHA256
149c138dda003d584cd2a7e55e0cb17a41de38232a65ba301a82e445916d33bf
-
SHA512
946067853a3f3f4685353126a7fc7f9322a5cc9250011998cca36dfb373cca78139a5ab645b27ca2d426a9b231ef3dd13af1177b855409a640a6e2b7bad36b54
-
SSDEEP
3072:1dKMELf455RN5F0nOV3pqOclXC3qEoJxBrerL/PkkXx:6LC5onOYOclXSoJHs
Static task
static1
Behavioral task
behavioral1
Sample
149c138dda003d584cd2a7e55e0cb17a41de38232a65ba301a82e445916d33bf.exe
Resource
win10-20220812-en
Malware Config
Extracted
danabot
198.15.112.179:443
185.62.56.245:443
153.92.223.225:443
192.119.70.159:443
-
embedded_hash
6618C163D57D6441FCCA65D86C4D380D
-
type
loader
Targets
-
-
Target
149c138dda003d584cd2a7e55e0cb17a41de38232a65ba301a82e445916d33bf
-
Size
197KB
-
MD5
d49fb57fa2a6edcc4c9e71c36e343cdf
-
SHA1
47fc8cd554918dfb9bd6b943a9b6d93d6e99775d
-
SHA256
149c138dda003d584cd2a7e55e0cb17a41de38232a65ba301a82e445916d33bf
-
SHA512
946067853a3f3f4685353126a7fc7f9322a5cc9250011998cca36dfb373cca78139a5ab645b27ca2d426a9b231ef3dd13af1177b855409a640a6e2b7bad36b54
-
SSDEEP
3072:1dKMELf455RN5F0nOV3pqOclXC3qEoJxBrerL/PkkXx:6LC5onOYOclXSoJHs
Score10/10-
Detects Smokeloader packer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Deletes itself
-