General
-
Target
9394bef26c1a33a47eafa0d59feddce340f6264e894223fc2e557203caf9919d
-
Size
271KB
-
Sample
221005-z6sh6sfhhj
-
MD5
50351413962708578cb963ddf751b385
-
SHA1
1e84e1d7a82c026c665e59c0dbc202689a5ab304
-
SHA256
9394bef26c1a33a47eafa0d59feddce340f6264e894223fc2e557203caf9919d
-
SHA512
59a4eb350dec60cd8466e1e0ea18ee0a8b7e5eb706d13dfaaf1dc5ec422574d898a066b5c1f44e3b7064b88aa921137becff388530e962e9a24988c8ffa905e0
-
SSDEEP
6144:KEP1s0DaLlZgUOQC74oyRuzbgwuaJZwVfUPk:KEtsv5ZgU/C7DUunndJPc
Static task
static1
Behavioral task
behavioral1
Sample
9394bef26c1a33a47eafa0d59feddce340f6264e894223fc2e557203caf9919d.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
danabot
49.0.50.0:57
51.0.52.0:0
53.0.54.0:1200
55.0.56.0:65535
-
embedded_hash
EAD30BF58E340E9E105B328F524565E0
-
type
loader
Targets
-
-
Target
9394bef26c1a33a47eafa0d59feddce340f6264e894223fc2e557203caf9919d
-
Size
271KB
-
MD5
50351413962708578cb963ddf751b385
-
SHA1
1e84e1d7a82c026c665e59c0dbc202689a5ab304
-
SHA256
9394bef26c1a33a47eafa0d59feddce340f6264e894223fc2e557203caf9919d
-
SHA512
59a4eb350dec60cd8466e1e0ea18ee0a8b7e5eb706d13dfaaf1dc5ec422574d898a066b5c1f44e3b7064b88aa921137becff388530e962e9a24988c8ffa905e0
-
SSDEEP
6144:KEP1s0DaLlZgUOQC74oyRuzbgwuaJZwVfUPk:KEtsv5ZgU/C7DUunndJPc
Score10/10-
Detects Smokeloader packer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-