General
- Target setup.exe
- Size 246KB
- Sample230325-c7khmach6t
- SHA256 1e7e5648d41a883afc03b1565cb5f7c5712b49562bf64ddd25787c6cb3fa4389
- MD5 c6dcf1137c239b05a6ea09f138961cad
- SHA1 e49a91a70d5cf831719a6fcd38f21f611930f03a
- SHA512 17908f8868baf300cb3154d958c3216c40f896a4869a78e2bf30068a3c47400359afc6eb6f4c5a465643f504d01c20ac9d1734197a818aa6544a649e8c0eb5da
- SSDEEP 3072:9WdZzhoXOLgdDAgTn/QfWuDHUUgELdSeViiYch50r5cvd0WNObVq:INcTbS3LdSeVBYc7Cmd0j
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 246KB
- SHA256 1e7e5648d41a883afc03b1565cb5f7c5712b49562bf64ddd25787c6cb3fa4389
- MD5 c6dcf1137c239b05a6ea09f138961cad
- SHA1 e49a91a70d5cf831719a6fcd38f21f611930f03a
- SHA512 17908f8868baf300cb3154d958c3216c40f896a4869a78e2bf30068a3c47400359afc6eb6f4c5a465643f504d01c20ac9d1734197a818aa6544a649e8c0eb5da
- SSDEEP 3072:9WdZzhoXOLgdDAgTn/QfWuDHUUgELdSeViiYch50r5cvd0WNObVq:INcTbS3LdSeVBYc7Cmd0j
- MD5 SHA1 SHA512 SSDEEP
Score10/10