General
- Target file.exe
- Size 207KB
- Sample230920-rmtywsgg4w
- SHA256 8407e4bb6ffb05e1631bc7c1cc2165bb3ceef41e20586b9ca16baa65896c04ab
- MD5 c1a5f2c2fdfe92338f77c7b7d491d93e
- SHA1 50f7c267a1dd3508d4e18c46d83d1e5dabe48310
- SHA512 a3f3144990d1ca7c1cc6e72f2fc33f9e9346e359ef189140937c1235417795d1409005a247004df55934cc21fabcf091382d84b2b0f77c82b8464ce93dd191c1
- SSDEEP 6144:dPhrK7e9dDoe8OnkQp1Y7IVFKfukMG4UTu:dPhm0dDohO1asjKfukqc
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gudintas.at/tmp/
-
http://pik96.ru/tmp/
-
http://rosatiauto.com/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 207KB
- SHA256 8407e4bb6ffb05e1631bc7c1cc2165bb3ceef41e20586b9ca16baa65896c04ab
- MD5 c1a5f2c2fdfe92338f77c7b7d491d93e
- SHA1 50f7c267a1dd3508d4e18c46d83d1e5dabe48310
- SHA512 a3f3144990d1ca7c1cc6e72f2fc33f9e9346e359ef189140937c1235417795d1409005a247004df55934cc21fabcf091382d84b2b0f77c82b8464ce93dd191c1
- SSDEEP 6144:dPhrK7e9dDoe8OnkQp1Y7IVFKfukMG4UTu:dPhm0dDohO1asjKfukqc
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself
-
Executes dropped EXE