General
- Target setup.exe
- Size 176KB
- Sample230320-m3z3mafa9t
- SHA256 58ddbeea7b180300f5c46a5aee7ee941e77d2a1667f0e2bc13ee869259a9f3ca
- MD5 75573ff33d17f38e5486da7efc9682c1
- SHA1 22858c53f83a55ef51cf13c2dbc122e87b7e1603
- SHA512 655347def91da09d8521e2032219a6bea53c455c90ad9f3a199aae476159bdc128a0ff284d629bc47556e5b45bec0a88b7b5b688df11f2ad041541840d815894
- SSDEEP 3072:CNUrXReVorzfjLfbxheZXCfLKzhLbIghu:7XkQbxYZSzK91h
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 176KB
- SHA256 58ddbeea7b180300f5c46a5aee7ee941e77d2a1667f0e2bc13ee869259a9f3ca
- MD5 75573ff33d17f38e5486da7efc9682c1
- SHA1 22858c53f83a55ef51cf13c2dbc122e87b7e1603
- SHA512 655347def91da09d8521e2032219a6bea53c455c90ad9f3a199aae476159bdc128a0ff284d629bc47556e5b45bec0a88b7b5b688df11f2ad041541840d815894
- SSDEEP 3072:CNUrXReVorzfjLfbxheZXCfLKzhLbIghu:7XkQbxYZSzK91h
- MD5 SHA1 SHA512 SSDEEP
Score10/10