General
- Target setup.exe
- Size 215KB
- Sample230426-ajbjpsfg5v
- SHA256 c3c492f7cbdeca7fbacbd36e95927c0aa80795691fa7bd95775a7efd5353ceb4
- MD5 675b8af53a9ad5da6b1cfdc75f82fe5a
- SHA1 a97812594ce18c074c6a66a9c1e5877c4124af9b
- SHA512 0e59f3a7a293b7c30c2814ea3bb21386c29635de6e5958fc5476fef9e4389988380dd6fc69c5d3bd85e9f486e954bd63335f0ad9eb24a9264d058237437692e6
- SSDEEP 3072:i0oWoEao69GdIE20qzgyNqNQmjZaTsk6YcayEvBCJXR95y6E:ZoBGc0q8y2YTskiEw6
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 215KB
- SHA256 c3c492f7cbdeca7fbacbd36e95927c0aa80795691fa7bd95775a7efd5353ceb4
- MD5 675b8af53a9ad5da6b1cfdc75f82fe5a
- SHA1 a97812594ce18c074c6a66a9c1e5877c4124af9b
- SHA512 0e59f3a7a293b7c30c2814ea3bb21386c29635de6e5958fc5476fef9e4389988380dd6fc69c5d3bd85e9f486e954bd63335f0ad9eb24a9264d058237437692e6
- SSDEEP 3072:i0oWoEao69GdIE20qzgyNqNQmjZaTsk6YcayEvBCJXR95y6E:ZoBGc0q8y2YTskiEw6
- MD5 SHA1 SHA512 SSDEEP
Score10/10