General
- Target file.exe
- Size 266KB
- Sample230908-pq7caabe7s
- SHA256 802ba7207a318efc8155756a171efee5d6f9432d7297c985e3bf63e87dabd0fe
- MD5 c8c314317aaffd359c59e7a76179e916
- SHA1 ae4ad73932810c761e55d25613bd5fbb0637e7fd
- SHA512 88d32628c825de5ac9d80525adc0f7312656cf44c2b2be63e65512821092d25a96ebab17b1a92ff6473d8632f3423d0c9b58fcfcf16eee272027be620ebb8de1
- SSDEEP 6144:oDMB4HLMDC8w+w9y7JyxVYRccuELneSFB:oDt+C8wi7JynYRc9ETeSFB
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230831-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://taibi.at/tmp/
-
http://01stroy.ru/tmp/
-
http://mal-net.com/tmp/
-
http://gromograd.ru/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 266KB
- SHA256 802ba7207a318efc8155756a171efee5d6f9432d7297c985e3bf63e87dabd0fe
- MD5 c8c314317aaffd359c59e7a76179e916
- SHA1 ae4ad73932810c761e55d25613bd5fbb0637e7fd
- SHA512 88d32628c825de5ac9d80525adc0f7312656cf44c2b2be63e65512821092d25a96ebab17b1a92ff6473d8632f3423d0c9b58fcfcf16eee272027be620ebb8de1
- SSDEEP 6144:oDMB4HLMDC8w+w9y7JyxVYRccuELneSFB:oDt+C8wi7JynYRc9ETeSFB
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself
-
Executes dropped EXE