General

  • Target

    a76ac34a9fc8146224d737ebb15bdbf2e35acd67e274ad328fcab5b99f8a99c1_JC.exe

  • Size

    266KB

  • Sample

    230923-xtyhjshh6x

  • MD5

    9abf90bde094785cffbe3f34094b59e0

  • SHA1

    18e57ddb3d32d20f526cee6dd2c4731fea2f326b

  • SHA256

    a76ac34a9fc8146224d737ebb15bdbf2e35acd67e274ad328fcab5b99f8a99c1

  • SHA512

    ede2ad56ae8c63c261f4f51b72b98c257dfbccc384c9926ad6e348821d1316fe1ae1a7d85d5d1048b1b95ef845d523059a5c7f365cbb09634d283be492b7513a

  • SSDEEP

    3072:iBXiXrgPgrVGtBtNHPBidyXqJWmICEg43wZi6lw/khZjfHg:+ArnrEtB3vBioXqJ3TEg43k/wshZj

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Extracted

Family

smokeloader

Version

2022

C2

http://gudintas.at/tmp/

http://pik96.ru/tmp/

http://rosatiauto.com/tmp/

http://kingpirate.ru/tmp/

rc4.i32
rc4.i32

Targets

    • Target

      a76ac34a9fc8146224d737ebb15bdbf2e35acd67e274ad328fcab5b99f8a99c1_JC.exe

    • Size

      266KB

    • MD5

      9abf90bde094785cffbe3f34094b59e0

    • SHA1

      18e57ddb3d32d20f526cee6dd2c4731fea2f326b

    • SHA256

      a76ac34a9fc8146224d737ebb15bdbf2e35acd67e274ad328fcab5b99f8a99c1

    • SHA512

      ede2ad56ae8c63c261f4f51b72b98c257dfbccc384c9926ad6e348821d1316fe1ae1a7d85d5d1048b1b95ef845d523059a5c7f365cbb09634d283be492b7513a

    • SSDEEP

      3072:iBXiXrgPgrVGtBtNHPBidyXqJWmICEg43wZi6lw/khZjfHg:+ArnrEtB3vBioXqJ3TEg43k/wshZj

MITRE ATT&CK Enterprise v15

Tasks