General

  • Target

    1320-65-0x0000000002550000-0x0000000002566000-memory.dmp

  • Size

    88KB

  • MD5

    4e67b4790676df45cc76d6d5364c87ea

  • SHA1

    f28d898c96d92b9baf2ddfa1ba033c57a4d71098

  • SHA256

    e224c21a625a408d969ab03d43deb8fd89a6122acc3cd0490273b0a51720dc74

  • SHA512

    3a53f9b4892660d095e7793cc68c40da29aee33aa521a820cafdc9989b4d9239d131b4d4422f628726caed44e425da88b4d9f8f24ce0d9e33ba6be6a85f34f86

  • SSDEEP

    384:4t3TMWm0tSiRamfrOKpB2ajAa34BoopjtTQ5bzDNqvdTjel1l:4t4Wm0tSiRam6Kxjv0ooRtcfDNqvVj

Score
10/10

Malware Config

Extracted

Family

smokeloader

Version

2020

C2

http://akmedia.in/js/k/index.php

http://bethesdaserukam.org/setting/k/index.php

http://stemschools.in/js/k/index.php

http://dejarestaurant.com/wp-admin/js/k/index.php

http://moabscript.ir/wp-admin/js/k/index.php

http://nicehybridseeds.com/image/catalog/k/index.php

http://imaker.io/picktail/js/k/index.php

http://nanavatisworld.com/assets/js/k/index.php

http://smartbubox.com/img/k/index.php

http://krigenpharmaceuticals.com/js/k/index.php

rc4.i32
rc4.i32

Signatures

Files

  • 1320-65-0x0000000002550000-0x0000000002566000-memory.dmp