General
- Target setup.exe
- Size 295KB
- Sample230329-ccph4aed23
- SHA256 7514c71c085913c6ae0c1d556cd4af423e238dca1ad13e0b820895af6a4a6a02
- MD5 bcf3dd6c7fc056b5ab79eaac510a12fd
- SHA1 2ee46fc24ab0b2baad4224ef034afac6eca0c006
- SHA512 5142ba2acf90644d3d4584d59ae45712bc271d07a7799eedb8db1f020383775d1eb3005c0404de461c760b7384dae41b5273da6a81eafdcfa9fbf7bdebd641a7
- SSDEEP 3072:rXd2H685mdnkcvFZX3BCIOM+DPYFLqvuIWRpGosXMmNR81VY2Avwpqlmc2toiDT9:LmYdnkg3BJdwXNNRwAvKbtDDT9
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 295KB
- SHA256 7514c71c085913c6ae0c1d556cd4af423e238dca1ad13e0b820895af6a4a6a02
- MD5 bcf3dd6c7fc056b5ab79eaac510a12fd
- SHA1 2ee46fc24ab0b2baad4224ef034afac6eca0c006
- SHA512 5142ba2acf90644d3d4584d59ae45712bc271d07a7799eedb8db1f020383775d1eb3005c0404de461c760b7384dae41b5273da6a81eafdcfa9fbf7bdebd641a7
- SSDEEP 3072:rXd2H685mdnkcvFZX3BCIOM+DPYFLqvuIWRpGosXMmNR81VY2Avwpqlmc2toiDT9:LmYdnkg3BJdwXNNRwAvKbtDDT9
- MD5 SHA1 SHA512 SSDEEP
Score10/10