General
- Target file.exe
- Size 308KB
- Sample231004-anw17saa59
- SHA256 7b99eb0693073004b828f0ac63bb71d05ed9cca91991ad630005c3f455da1c21
- MD5 7d2554d508cd50eb45248a5f26184749
- SHA1 18ccd1a50c5404bf6a8cc4c6981c84e7cb1eaed1
- SHA512 7afd94573161ed45d944bbf72eceb15a27157f987381200cbfd237dd1c3dcd3ece692f0ac5d04fa042d595188e3f6dc3570f874a9451220fe8fedc707e7b198c
- SSDEEP 3072:6ZTh4K4/rCgcy0ampUdM+HYcZ0D5DDGObd9Ganrc9YOyZZyCVVoY:6Zd4K4TCp1ampUdMflGO3rnrcGOQZH
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gudintas.at/tmp/
-
http://pik96.ru/tmp/
-
http://rosatiauto.com/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 308KB
- SHA256 7b99eb0693073004b828f0ac63bb71d05ed9cca91991ad630005c3f455da1c21
- MD5 7d2554d508cd50eb45248a5f26184749
- SHA1 18ccd1a50c5404bf6a8cc4c6981c84e7cb1eaed1
- SHA512 7afd94573161ed45d944bbf72eceb15a27157f987381200cbfd237dd1c3dcd3ece692f0ac5d04fa042d595188e3f6dc3570f874a9451220fe8fedc707e7b198c
- SSDEEP 3072:6ZTh4K4/rCgcy0ampUdM+HYcZ0D5DDGObd9Ganrc9YOyZZyCVVoY:6Zd4K4TCp1ampUdMflGO3rnrcGOQZH
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself