General

  • Target

    setup.exe

  • Size

    250KB

  • Sample

    230401-cjemgagf4w

  • MD5

    faadb95540403c9c9eca74ec60840270

  • SHA1

    f56226ea87983e202ef8c860f2f5da1c2d88edb3

  • SHA256

    c8703044d61f113ce8b037ffbdedb0f9303a3b40f1daacc7e998a4e340bc4676

  • SHA512

    c3f3740144bc127b3a80d9916c5c3b1db43d7e04e97bfb06dfcd6024070f0f29d4750ffbf53ad67f73236651785061360564721e0ad35641399e5f651c640186

  • SSDEEP

    3072:bL91z1FYjt8Xb3kRzv1OwkDmefN/8CF3hm2RL8dM2GyBpxwjmR+v:Xz1qib3XwkDmkN/TZhP8dlep

Malware Config

Extracted

Family

smokeloader

Botnet

lab

Extracted

Family

smokeloader

Version

2020

C2

http://host-file-host6.com/

http://host-host-file8.com/

rc4.i32
rc4.i32

Targets

    • Target

      setup.exe

    • Size

      250KB

    • MD5

      faadb95540403c9c9eca74ec60840270

    • SHA1

      f56226ea87983e202ef8c860f2f5da1c2d88edb3

    • SHA256

      c8703044d61f113ce8b037ffbdedb0f9303a3b40f1daacc7e998a4e340bc4676

    • SHA512

      c3f3740144bc127b3a80d9916c5c3b1db43d7e04e97bfb06dfcd6024070f0f29d4750ffbf53ad67f73236651785061360564721e0ad35641399e5f651c640186

    • SSDEEP

      3072:bL91z1FYjt8Xb3kRzv1OwkDmefN/8CF3hm2RL8dM2GyBpxwjmR+v:Xz1qib3XwkDmkN/TZhP8dlep

MITRE ATT&CK Enterprise v6

Tasks