General
- Target setup.exe
- Size 178KB
- Sample230321-b3kr6agc66
- SHA256 0487bf1bf042cd5e1ddca7d6ca3edab3ca4fc18e1b1e1de297b131e340755562
- MD5 d9a2a419f6afb602f7f297853da1d510
- SHA1 bce897e152c6fc3d798589cdeea1f36250d432d0
- SHA512 07c53d77ec24922cdf14229c527c575167032fb0e99217c3b37078e045bb519fe82f227015934d468468c9fb885e5e661085a20308eb2fd4c43b013db347107c
- SSDEEP 3072:itMwTH3U6BW1tLwm2n7svtJK7wMSZ1ssZ:ETXEkm2n7QcwBZ1s
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 178KB
- SHA256 0487bf1bf042cd5e1ddca7d6ca3edab3ca4fc18e1b1e1de297b131e340755562
- MD5 d9a2a419f6afb602f7f297853da1d510
- SHA1 bce897e152c6fc3d798589cdeea1f36250d432d0
- SHA512 07c53d77ec24922cdf14229c527c575167032fb0e99217c3b37078e045bb519fe82f227015934d468468c9fb885e5e661085a20308eb2fd4c43b013db347107c
- SSDEEP 3072:itMwTH3U6BW1tLwm2n7svtJK7wMSZ1ssZ:ETXEkm2n7QcwBZ1s
- MD5 SHA1 SHA512 SSDEEP
Score10/10