General
- Target file.exe
- Size 267KB
- Sample230927-qqnqlscc63
- SHA256 8d563a1972dc04359f7b2c710012276e85aebae7ef3919c513698d188150bdd3
- MD5 215972a4c118e9cf450fc9cbc00fba7a
- SHA1 03411fe2582c1123e7cd45cd81e2d1eb924bfa5c
- SHA512 f8b4ee56c11dd70c051aa007f6e1f2e686a1ca9cfd9403552c0eeff23e65fafd5b8168a2750d6fff07ca39bea2a61585bb552179ea695bc569b3553cc5479853
- SSDEEP 6144:wOUvZxzK+Qed1OukRXPhjcjuFV9FRMxNT4:xIxzq48uw+juFzu54
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gudintas.at/tmp/
-
http://pik96.ru/tmp/
-
http://rosatiauto.com/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 267KB
- SHA256 8d563a1972dc04359f7b2c710012276e85aebae7ef3919c513698d188150bdd3
- MD5 215972a4c118e9cf450fc9cbc00fba7a
- SHA1 03411fe2582c1123e7cd45cd81e2d1eb924bfa5c
- SHA512 f8b4ee56c11dd70c051aa007f6e1f2e686a1ca9cfd9403552c0eeff23e65fafd5b8168a2750d6fff07ca39bea2a61585bb552179ea695bc569b3553cc5479853
- SSDEEP 6144:wOUvZxzK+Qed1OukRXPhjcjuFV9FRMxNT4:xIxzq48uw+juFzu54
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself
-
Executes dropped EXE