General
-
Target
24fffef806e55086022633e5a0491873e6b576ea50258ca6d6e1c357efbadf25
-
Size
341KB
-
Sample
221204-frzt6adf7y
-
MD5
da90d46637df5e99359cb9f8c1ab39cf
-
SHA1
e8cbf23997dc953070359f4da1eea7e8b42e5f30
-
SHA256
24fffef806e55086022633e5a0491873e6b576ea50258ca6d6e1c357efbadf25
-
SHA512
f3a84db66a068906f8d2557f16565e3a464414a87c89b2c456671a03df467e7712210a218b15ef52598f9eea1b51b43b024e6d67fb888885330e4ce48b1c2090
-
SSDEEP
6144:I+RoYCABBUL67JwB+vtbEeNunMW2Rqn4Gn0zY:1RoYTE6FwB+FAe6MW3MzY
Static task
static1
Malware Config
Extracted
vidar
56
1148
https://t.me/asifrazatg
https://steamcommunity.com/profiles/76561199439929669
-
profile_id
1148
Targets
-
-
Target
24fffef806e55086022633e5a0491873e6b576ea50258ca6d6e1c357efbadf25
-
Size
341KB
-
MD5
da90d46637df5e99359cb9f8c1ab39cf
-
SHA1
e8cbf23997dc953070359f4da1eea7e8b42e5f30
-
SHA256
24fffef806e55086022633e5a0491873e6b576ea50258ca6d6e1c357efbadf25
-
SHA512
f3a84db66a068906f8d2557f16565e3a464414a87c89b2c456671a03df467e7712210a218b15ef52598f9eea1b51b43b024e6d67fb888885330e4ce48b1c2090
-
SSDEEP
6144:I+RoYCABBUL67JwB+vtbEeNunMW2Rqn4Gn0zY:1RoYTE6FwB+FAe6MW3MzY
-
Detects Smokeloader packer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of SetThreadContext
-