General
- Target SecuriteInfo.com.Win32.PWSX-gen.27268.14094
- Size 223KB
- Sample240121-mlsbfsbcbl
- SHA256 b996a1613f4254a630d0b3889c71e1c500be05a9c7a03ec97130ca0998009b70
- MD5 16ea7f0ecdff9eac933dbf9babeff1ef
- SHA1 2816c942dd3e0f2ed3fd19fae7f193273a39e81a
- SHA512 60bf08f445a213797ede782da15d6c4202913ed785e733985ac35cec7ad8cd266d85281eab5c5bcf1b68077248269bf1b8eeb7329a00dc10d1effbdd67f0be88
- SSDEEP 3072:DDp1Df/El6jtmnmOU6YtwjwVWKOrLq62gZNNfv3UsPlroAGeHY2tw:DHL/C6OhwDOrP2gZX/UsPlt
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.PWSX-gen.27268.exe
Resource
win7-20231129-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.PWSX-gen.27268.exe
Resource
win10v2004-20231215-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub3
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gxutc2c.com/tmp/index.php
-
http://proekt8.ru/tmp/index.php
-
http://mth.com.ua/tmp/index.php
-
http://pirateking.online/tmp/index.php
-
http://piratia.pw/tmp/index.php
-
http://go-piratia.ru/tmp/index.php
rc4.i32
rc4.i32
Targets
-
- Target SecuriteInfo.com.Win32.PWSX-gen.27268.14094
- Size 223KB
- SHA256 b996a1613f4254a630d0b3889c71e1c500be05a9c7a03ec97130ca0998009b70
- MD5 16ea7f0ecdff9eac933dbf9babeff1ef
- SHA1 2816c942dd3e0f2ed3fd19fae7f193273a39e81a
- SHA512 60bf08f445a213797ede782da15d6c4202913ed785e733985ac35cec7ad8cd266d85281eab5c5bcf1b68077248269bf1b8eeb7329a00dc10d1effbdd67f0be88
- SSDEEP 3072:DDp1Df/El6jtmnmOU6YtwjwVWKOrLq62gZNNfv3UsPlroAGeHY2tw:DHL/C6OhwDOrP2gZX/UsPlt
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself