General

  • Target

    31e54f46b20976c9779d4fde6282ec9fc581b50646a802a517e827c5e7a6aebb_JC.exe

  • Size

    202KB

  • Sample

    230924-nz677sec6x

  • MD5

    bf6863460cf38b67423d10b9f51c4751

  • SHA1

    fa8d3490fcecc1e799c8583b6b1fbf48d21960b6

  • SHA256

    31e54f46b20976c9779d4fde6282ec9fc581b50646a802a517e827c5e7a6aebb

  • SHA512

    78667b3d1796a61289bda88eecebbdb39e4a2bfb9001f57c9b52376a590f33dc79f2f595488ec2b3f911455bee41fc426e5b5dca9d2b735c513b959c92e9812b

  • SSDEEP

    3072:nXJsh/iJRNYL+7ZbmH+nlHH05C2yO46E5JZ51ZW6YzaC:XGh/4RKgZbk+l/tZxO

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Extracted

Family

smokeloader

Version

2022

C2

http://gudintas.at/tmp/

http://pik96.ru/tmp/

http://rosatiauto.com/tmp/

http://kingpirate.ru/tmp/

rc4.i32
rc4.i32

Targets

    • Target

      31e54f46b20976c9779d4fde6282ec9fc581b50646a802a517e827c5e7a6aebb_JC.exe

    • Size

      202KB

    • MD5

      bf6863460cf38b67423d10b9f51c4751

    • SHA1

      fa8d3490fcecc1e799c8583b6b1fbf48d21960b6

    • SHA256

      31e54f46b20976c9779d4fde6282ec9fc581b50646a802a517e827c5e7a6aebb

    • SHA512

      78667b3d1796a61289bda88eecebbdb39e4a2bfb9001f57c9b52376a590f33dc79f2f595488ec2b3f911455bee41fc426e5b5dca9d2b735c513b959c92e9812b

    • SSDEEP

      3072:nXJsh/iJRNYL+7ZbmH+nlHH05C2yO46E5JZ51ZW6YzaC:XGh/4RKgZbk+l/tZxO

MITRE ATT&CK Enterprise v15

Tasks