General
- Target file.exe
- Size 274KB
- Sample231007-hkr7vabh32
- SHA256 cdb95d02df827debe9f841bfd5cb361a8a2d634e2f8ca4bd8c5c767d0d7b17e8
- MD5 5daeba9af00780bc8547105e9bf3085b
- SHA1 1d852fc064015caf7b7095b1ba674ce405578888
- SHA512 f5b4bdfffff7216dbd68c97105f8789c58c4951cdc635f4675ed0f65559a6df54b00f40a2909d1d7531db3d43803c603cdf680b7dd2d76a8d456a30feb7a0c8f
- SSDEEP 3072:lSFL9Z1/WDPGRP2uL/kKImU82pGxCmXL8SoE2:IXZsDPGPTLMKI38JxCm78BE
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gudintas.at/tmp/
-
http://pik96.ru/tmp/
-
http://rosatiauto.com/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 274KB
- SHA256 cdb95d02df827debe9f841bfd5cb361a8a2d634e2f8ca4bd8c5c767d0d7b17e8
- MD5 5daeba9af00780bc8547105e9bf3085b
- SHA1 1d852fc064015caf7b7095b1ba674ce405578888
- SHA512 f5b4bdfffff7216dbd68c97105f8789c58c4951cdc635f4675ed0f65559a6df54b00f40a2909d1d7531db3d43803c603cdf680b7dd2d76a8d456a30feb7a0c8f
- SSDEEP 3072:lSFL9Z1/WDPGRP2uL/kKImU82pGxCmXL8SoE2:IXZsDPGPTLMKI38JxCm78BE
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself
-
Executes dropped EXE