New-looking Sundown EK drops Smoke Loader, Kronos banker | Malwarebytes Labs
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Exploits - T1587.004 Exploits - T1588.005 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001
Show in Graph
Common Information
Type Value
UUID dece3b17-30fe-4db8-8ebd-8cf1d873f074
Fingerprint a7b024e5ac971695
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 17, 2016, midnight
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline New-looking Sundown EK drops Smoke Loader, Kronos banker
Title New-looking Sundown EK drops Smoke Loader, Kronos banker | Malwarebytes Labs
Detected Hints/Tags/Attributes 31/2/10
Source URLs
Redirection Url
Details Source https://blog.malwarebytes.com/threat-analysis/2016/10/new-looking-sundown-ek-drops-smoke-loader-kronos-banker/
URL Provider
Details Provider Source level domain
Details malwarebytes.com blog.malwarebytes.com
Attributes
Details Type #Events CTI Value
Details Domain 28 
dl.dropboxusercontent.com
Details Domain 1 
fhbg.futureproducts.xyz
Details Domain 1 
de.piclogo.xyz
Details File 1206 
index.php
Details File 1 
127.swf
Details File 1 
489567945678456874356487356743256.swf
Details File 2 
43526876827345687356872456.php
Details File 6 
z.php
Details sha256 1 
e420e521f891c1a6245e377dc7a6ab70458b7c0d77ad39535cb59018a542fe15
Details Url 1 
https://dl.dropboxusercontent.com/s/4o3dllw65z6wemb/vamos.lek