General
- Target file.exe
- Size 230KB
- Sample231208-w92pgabgel
- SHA256 f7f44a469cdf8049c9da6fb5b1e2fdbb4e3d1cf2f09ef0eba5889dea7ef80a97
- MD5 02a45302c305c0747c87ccf5620c12c0
- SHA1 1877ec0041c687feb85bd18b2e42ee10189e53b2
- SHA512 38ef597ff5ffa8a870120ed8de91e53dff3898bd2db277c7b57a47a477f8f73fb1f1416e3d5e3dce7e85b1201ad4098385db6599ca1e563a2c2b942a54cc4bc2
- SSDEEP 3072:hzrQGih+g51CO6HE5MSdoJ8A7NcQHRbIoGiWHCK:mGu+wzquG8aNzVIBH
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20231020-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20231127-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://humydrole.com/tmp/index.php
-
http://trunk-co.ru/tmp/index.php
-
http://weareelight.com/tmp/index.php
-
http://pirateking.online/tmp/index.php
-
http://piratia.pw/tmp/index.php
-
http://go-piratia.ru/tmp/index.php
rc4.i32
rc4.i32
Targets
-
- Target file.exe
- Size 230KB
- SHA256 f7f44a469cdf8049c9da6fb5b1e2fdbb4e3d1cf2f09ef0eba5889dea7ef80a97
- MD5 02a45302c305c0747c87ccf5620c12c0
- SHA1 1877ec0041c687feb85bd18b2e42ee10189e53b2
- SHA512 38ef597ff5ffa8a870120ed8de91e53dff3898bd2db277c7b57a47a477f8f73fb1f1416e3d5e3dce7e85b1201ad4098385db6599ca1e563a2c2b942a54cc4bc2
- SSDEEP 3072:hzrQGih+g51CO6HE5MSdoJ8A7NcQHRbIoGiWHCK:mGu+wzquG8aNzVIBH
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself
-
Executes dropped EXE