General
- Target SecuriteInfo.com.Win32.BotX-gen.4091.1918.exe
- Size 267KB
- Sample231013-e95bxsga65
- SHA256 56be912ce754d75f3385dab925ee34d9a0a1e07fe841c6a2e9adafa8021c99bc
- MD5 6cf01c815d1489b617c05fcd4640fffd
- SHA1 2ad52ebfc86e11c71cc901f18e6c4f80eac55079
- SHA512 33f2dab46769d6d88b953b7b3972f2561fde10998c1aebbb88bc5366d035b5c706ab4c5209868919b3f01f4e4501da5e06cfe468168dd1be0edea398dd5d28f6
- SSDEEP 3072:SEI3+gesvpzB4jtXebGwIBsCTZDAIpzNxU4YDG9DZINLgJNZqMG:XI3JvpzB4jtXlB3TvhNxU4YDCdINLj
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.BotX-gen.4091.1918.exe
Resource
win7-20230831-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.BotX-gen.4091.1918.exe
Resource
win10v2004-20230915-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub1
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gudintas.at/tmp/
-
http://pik96.ru/tmp/
-
http://rosatiauto.com/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target SecuriteInfo.com.Win32.BotX-gen.4091.1918.exe
- Size 267KB
- SHA256 56be912ce754d75f3385dab925ee34d9a0a1e07fe841c6a2e9adafa8021c99bc
- MD5 6cf01c815d1489b617c05fcd4640fffd
- SHA1 2ad52ebfc86e11c71cc901f18e6c4f80eac55079
- SHA512 33f2dab46769d6d88b953b7b3972f2561fde10998c1aebbb88bc5366d035b5c706ab4c5209868919b3f01f4e4501da5e06cfe468168dd1be0edea398dd5d28f6
- SSDEEP 3072:SEI3+gesvpzB4jtXebGwIBsCTZDAIpzNxU4YDG9DZINLgJNZqMG:XI3JvpzB4jtXlB3TvhNxU4YDCdINLj
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself
-
Executes dropped EXE