General
- Target setup.exe
- Size 249KB
- Sample230320-naaspsfb41
- SHA256 9677d7b71fd5ec5f25de3aa4fd698655d237ef7e1a58a382e1eb5051483ea7e9
- MD5 0eb2c650d6f5e5c50adbb7331bd0bf1e
- SHA1 841ca1071414c8f8ed174a9f16bebcc5662f933e
- SHA512 b3654614fba6711c0a7de70764845d7df434c3bf2dae20c16d40af89d64b3c0e74649ab2acce18a9199a487c7d3a49af72532275abcadaf9cca881751a34fb8c
- SSDEEP 3072:XmD8hRdXYL0DNyXmLndO9qKJuDLDfb+DyjvKq4hCRilZ53brDZj:X3dXYL0pHTdO12Dz+izilTvDZj
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 249KB
- SHA256 9677d7b71fd5ec5f25de3aa4fd698655d237ef7e1a58a382e1eb5051483ea7e9
- MD5 0eb2c650d6f5e5c50adbb7331bd0bf1e
- SHA1 841ca1071414c8f8ed174a9f16bebcc5662f933e
- SHA512 b3654614fba6711c0a7de70764845d7df434c3bf2dae20c16d40af89d64b3c0e74649ab2acce18a9199a487c7d3a49af72532275abcadaf9cca881751a34fb8c
- SSDEEP 3072:XmD8hRdXYL0DNyXmLndO9qKJuDLDfb+DyjvKq4hCRilZ53brDZj:X3dXYL0pHTdO12Dz+izilTvDZj
- MD5 SHA1 SHA512 SSDEEP
Score10/10