General
- Target file.exe
- Size 297KB
- Sample230912-bzn1each98
- SHA256 a8f85fd5c1cfe90bcfcf933d0d76144a1e045321943a6124e1edabe4e10b3635
- MD5 e760b71cc4a49e74d3d7bbb51e6bc36f
- SHA1 5bb0917dfb605383e4dc9818280d1e58bfcc2cde
- SHA512 ac8a80e330edacb6ce945dd7f26c1f921a37dac0d6d5f4c871ee3d4f18153c567f8efd5f2efd92e31490f5a430862fde2e524afb74e32dd43d80f046bcc3291b
- SSDEEP 3072:xwHmfPCYom4K8mak+PwOm5wbUIqyA+0lUX0rLUlv4TS1h/Niui21lfA+qP:+Ghom4KP+0wlzQ2X0rR+hd
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230831-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://taibi.at/tmp/
-
http://01stroy.ru/tmp/
-
http://mal-net.com/tmp/
-
http://gromograd.ru/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 297KB
- SHA256 a8f85fd5c1cfe90bcfcf933d0d76144a1e045321943a6124e1edabe4e10b3635
- MD5 e760b71cc4a49e74d3d7bbb51e6bc36f
- SHA1 5bb0917dfb605383e4dc9818280d1e58bfcc2cde
- SHA512 ac8a80e330edacb6ce945dd7f26c1f921a37dac0d6d5f4c871ee3d4f18153c567f8efd5f2efd92e31490f5a430862fde2e524afb74e32dd43d80f046bcc3291b
- SSDEEP 3072:xwHmfPCYom4K8mak+PwOm5wbUIqyA+0lUX0rLUlv4TS1h/Niui21lfA+qP:+Ghom4KP+0wlzQ2X0rR+hd
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself
-
Executes dropped EXE