General
- Target setup.exe
- Size 197KB
- Sample230411-a87y7sbb31
- SHA256 1caa6ce5ec2129481db6402f1b9449e084de97a97aec7dcff9843ea169b996bf
- MD5 2e3d27072ae98534d90b5ea6ff4d7078
- SHA1 a189ab7367a0279678dc967d763a88fd768a89e9
- SHA512 644ce5038ce9e7dc754c6062775530fe719b9e991e700837a5d17336a400c7e723fff426fcd0b278a3f18280614a1bef5b913e538977e0a69d3cfd5658e4e217
- SSDEEP 3072:7ee28anlk0YN7WbIFKwJFIzGZ1LBmbwmvTVeMPeZxWOwLW:P28cG7eqKwJxTLawmLVFPe0y
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230221-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 197KB
- SHA256 1caa6ce5ec2129481db6402f1b9449e084de97a97aec7dcff9843ea169b996bf
- MD5 2e3d27072ae98534d90b5ea6ff4d7078
- SHA1 a189ab7367a0279678dc967d763a88fd768a89e9
- SHA512 644ce5038ce9e7dc754c6062775530fe719b9e991e700837a5d17336a400c7e723fff426fcd0b278a3f18280614a1bef5b913e538977e0a69d3cfd5658e4e217
- SSDEEP 3072:7ee28anlk0YN7WbIFKwJFIzGZ1LBmbwmvTVeMPeZxWOwLW:P28cG7eqKwJxTLawmLVFPe0y
- MD5 SHA1 SHA512 SSDEEP
Score10/10