General
- Target setup.exe
- Size 360KB
- Sample230323-bmtp5aee7v
- SHA256 18f8dd5c8fffc77a808cea5c6e7e7aa922360a64b768b9fbcd4a4c51e4851da1
- MD5 9d228b3473942173a21dd33fc1632c31
- SHA1 9ae0f74e5e82e0d0f9dff79a9ecb3cfa081d3e8f
- SHA512 2d4a9861cb89a9c3d8e59f95bcfd57e735535f18d863865866bb19280310374d50b6845c262ed7b2379d67f21af9563b4385d90dbca0cd9c03a72d4a3fb4d9d3
- SSDEEP 3072:Judo8yK7PYV2wZM2j3Y33QVxmuTeZoCUOuA2TVlE4btUk/X8QxRV:JuoF833CYuvCUOuRtUIx
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 360KB
- SHA256 18f8dd5c8fffc77a808cea5c6e7e7aa922360a64b768b9fbcd4a4c51e4851da1
- MD5 9d228b3473942173a21dd33fc1632c31
- SHA1 9ae0f74e5e82e0d0f9dff79a9ecb3cfa081d3e8f
- SHA512 2d4a9861cb89a9c3d8e59f95bcfd57e735535f18d863865866bb19280310374d50b6845c262ed7b2379d67f21af9563b4385d90dbca0cd9c03a72d4a3fb4d9d3
- SSDEEP 3072:Judo8yK7PYV2wZM2j3Y33QVxmuTeZoCUOuA2TVlE4btUk/X8QxRV:JuoF833CYuvCUOuRtUIx
- MD5 SHA1 SHA512 SSDEEP
Score10/10