General
- Target file.exe
- Size 239KB
- Sample230920-lpw85sfe2v
- SHA256 a4e6221aa7745feb21d710cb4919530751ce3ad657d49d8b5c26cf76269fba72
- MD5 d8d48faf7adb599fe1e17451b164e9db
- SHA1 af838a24a20b71181977cb1920f4764676573846
- SHA512 6a29c5f596384cad5bc364644962bde6a89a8134c64167e7fccee7ebc1a4eaf536a9469fa8199e00092835e5522cc9e3e729034a07e1e1e9d2c549ac3f43dff5
- SSDEEP 6144:p7qgq/a6G/A3F9qFuGNSxhOCZv+N/HhT:Btga6AgKFmxlZYF
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gudintas.at/tmp/
-
http://pik96.ru/tmp/
-
http://rosatiauto.com/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 239KB
- SHA256 a4e6221aa7745feb21d710cb4919530751ce3ad657d49d8b5c26cf76269fba72
- MD5 d8d48faf7adb599fe1e17451b164e9db
- SHA1 af838a24a20b71181977cb1920f4764676573846
- SHA512 6a29c5f596384cad5bc364644962bde6a89a8134c64167e7fccee7ebc1a4eaf536a9469fa8199e00092835e5522cc9e3e729034a07e1e1e9d2c549ac3f43dff5
- SSDEEP 6144:p7qgq/a6G/A3F9qFuGNSxhOCZv+N/HhT:Btga6AgKFmxlZYF
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself