General
- Target setup.exe
- Size 249KB
- Sample230320-nmp36afc5v
- SHA256 5ae1550d982c796f470292df9afb34df4bdc216c1b09d0b33e99db048f6c908e
- MD5 be44e7e27756712940e38a9b1b007362
- SHA1 6f958629c18d5771d2d468eef40cba94fbae5af6
- SHA512 f744d995bc44e08a85e7ddd93d8c006f3f3242c5be7fb42a00b9dac78c75fef08d7cd7c10f2a680e2cf7e7e372f9effd496e5231bf2e39f248ab7397f53a3da0
- SSDEEP 3072:6DWhXbPX6uL3aRByJw9Rg2WqXBFS52h1B3KsgB5nbrOs+:DbX6uL3cKwRIu1B3Ksg7vOs+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 249KB
- SHA256 5ae1550d982c796f470292df9afb34df4bdc216c1b09d0b33e99db048f6c908e
- MD5 be44e7e27756712940e38a9b1b007362
- SHA1 6f958629c18d5771d2d468eef40cba94fbae5af6
- SHA512 f744d995bc44e08a85e7ddd93d8c006f3f3242c5be7fb42a00b9dac78c75fef08d7cd7c10f2a680e2cf7e7e372f9effd496e5231bf2e39f248ab7397f53a3da0
- SSDEEP 3072:6DWhXbPX6uL3aRByJw9Rg2WqXBFS52h1B3KsgB5nbrOs+:DbX6uL3cKwRIu1B3Ksg7vOs+
- MD5 SHA1 SHA512 SSDEEP
Score10/10