General
- Target setup.exe
- Size 247KB
- Sample230320-ngkw9adb97
- SHA256 116f4077a8e1f1d396993c7f02ab845a3db6fed27cfa4e89470b693d7b49c6a8
- MD5 533adce793a4b2fe848e8ea9a975408f
- SHA1 83db651c6d8e687589b78d64bad49e565af9ece0
- SHA512 65a3a349bf4648c979d37a004a4311ae9d941967d0b7b9860fb7dbf59dcb524beb87632fcbea2e5578b87a86415f1ff61f773f43b8e3aca206a6187e8fe0b1a6
- SSDEEP 3072:6kRjnJhLEaGtTdR8M3mah4KFYyOTbG4Vhr5n/mzk:LnJhLEdRuM3ehl/e
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 247KB
- SHA256 116f4077a8e1f1d396993c7f02ab845a3db6fed27cfa4e89470b693d7b49c6a8
- MD5 533adce793a4b2fe848e8ea9a975408f
- SHA1 83db651c6d8e687589b78d64bad49e565af9ece0
- SHA512 65a3a349bf4648c979d37a004a4311ae9d941967d0b7b9860fb7dbf59dcb524beb87632fcbea2e5578b87a86415f1ff61f773f43b8e3aca206a6187e8fe0b1a6
- SSDEEP 3072:6kRjnJhLEaGtTdR8M3mah4KFYyOTbG4Vhr5n/mzk:LnJhLEdRuM3ehl/e
- MD5 SHA1 SHA512 SSDEEP
Score10/10