General
- Target file.exe
- Size 288KB
- Sample231008-ll2dpadd95
- SHA256 141398e4cab2c24c9df53d19f3310a31c5edbc39e8dc64fec46003b2f6255f4e
- MD5 854b5c0686fecd62735cfe962db1fd8e
- SHA1 81b9c3d72043754056156694432f14be17da937f
- SHA512 2d4eb10f2b4630dc52f3ba075a50e52431fd84f4579c766e3f80634dc247890e311bd2a727d2b186b5da973bb73799ce1dc50d9532b4cf2cbffb457adf90112f
- SSDEEP 3072:ccSS88xWg9uov8/WK3OE+Mh+FGf41QuSA/a9:WS1WH+8//OET8ev
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gudintas.at/tmp/
-
http://pik96.ru/tmp/
-
http://rosatiauto.com/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 288KB
- SHA256 141398e4cab2c24c9df53d19f3310a31c5edbc39e8dc64fec46003b2f6255f4e
- MD5 854b5c0686fecd62735cfe962db1fd8e
- SHA1 81b9c3d72043754056156694432f14be17da937f
- SHA512 2d4eb10f2b4630dc52f3ba075a50e52431fd84f4579c766e3f80634dc247890e311bd2a727d2b186b5da973bb73799ce1dc50d9532b4cf2cbffb457adf90112f
- SSDEEP 3072:ccSS88xWg9uov8/WK3OE+Mh+FGf41QuSA/a9:WS1WH+8//OET8ev
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself
-
Executes dropped EXE