General
-
Target
4468ce5cc5fe2589893be91a0cd2170aad8ec75aff9d1003d36995cabcad3658
-
Size
256KB
-
Sample
221027-kaevwabegl
-
MD5
322e1f9be173e881a9338aa15fc2f779
-
SHA1
abf139eccde40824b0eb52e2a275e400f25d3a1d
-
SHA256
4468ce5cc5fe2589893be91a0cd2170aad8ec75aff9d1003d36995cabcad3658
-
SHA512
ae9f8521e84cadbd4782e254ac7408f74c8d595561803b93a420c56b5c4d48c3d2080fb04627cc6d5ac2159aa4c3428bf4e91b0072b21c2408dcfa33c7e5ca3b
-
SSDEEP
3072:+Ximp5GWPmx8GjK6lP7O/eRUIufum07yntmhs0iuEqUgN8CLgSrKfFJE:GJp5GWxEPK/Ii076tXX5gNFlrWU
Static task
static1
Behavioral task
behavioral1
Sample
4468ce5cc5fe2589893be91a0cd2170aad8ec75aff9d1003d36995cabcad3658.exe
Resource
win10-20220812-en
Malware Config
Extracted
danabot
172.86.120.215:443
213.227.155.103:443
103.187.26.147:443
172.86.120.138:443
-
embedded_hash
BBBB0DB8CB7E6D152424535822E445A7
-
type
loader
Targets
-
-
Target
4468ce5cc5fe2589893be91a0cd2170aad8ec75aff9d1003d36995cabcad3658
-
Size
256KB
-
MD5
322e1f9be173e881a9338aa15fc2f779
-
SHA1
abf139eccde40824b0eb52e2a275e400f25d3a1d
-
SHA256
4468ce5cc5fe2589893be91a0cd2170aad8ec75aff9d1003d36995cabcad3658
-
SHA512
ae9f8521e84cadbd4782e254ac7408f74c8d595561803b93a420c56b5c4d48c3d2080fb04627cc6d5ac2159aa4c3428bf4e91b0072b21c2408dcfa33c7e5ca3b
-
SSDEEP
3072:+Ximp5GWPmx8GjK6lP7O/eRUIufum07yntmhs0iuEqUgN8CLgSrKfFJE:GJp5GWxEPK/Ii076tXX5gNFlrWU
Score10/10-
Detects Smokeloader packer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Deletes itself
-