General
- Target file.exe
- Size 218KB
- Sample231004-tshh6ada2s
- SHA256 cc58ad1f7a097f077f06b78e21c1f5a01007cd98613b602bb22b95751920ba80
- MD5 6c7c496c1017c9435717f711bf5b8af3
- SHA1 f19a0b3803266c080bf7fcfad9fefab75ad7ef32
- SHA512 278e66e318b9e4cf279d364be5bd1279af5b3e0f978c18d95e90fa48aa9e1cd5085cf1174c05afd99e66ac38f6ac94482316c5e7548c5425a4577145425e7c78
- SSDEEP 3072:ozwXzwdfAqq4ULQTamiuqh2WGxzJRfg1Usc6NlppHHBTJX5qNht87hP9:L8bqDLQTBFqa5JRfgFj3HQNh
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gudintas.at/tmp/
-
http://pik96.ru/tmp/
-
http://rosatiauto.com/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 218KB
- SHA256 cc58ad1f7a097f077f06b78e21c1f5a01007cd98613b602bb22b95751920ba80
- MD5 6c7c496c1017c9435717f711bf5b8af3
- SHA1 f19a0b3803266c080bf7fcfad9fefab75ad7ef32
- SHA512 278e66e318b9e4cf279d364be5bd1279af5b3e0f978c18d95e90fa48aa9e1cd5085cf1174c05afd99e66ac38f6ac94482316c5e7548c5425a4577145425e7c78
- SSDEEP 3072:ozwXzwdfAqq4ULQTamiuqh2WGxzJRfg1Usc6NlppHHBTJX5qNht87hP9:L8bqDLQTBFqa5JRfgFj3HQNh
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself
-
Executes dropped EXE