General

  • Target

    804cc4b5ce2196b6c678d9d3489bfbda406e895a60e86f6c7c3205628f5cbadc

  • Size

    168KB

  • Sample

    240229-fksr9sdh4z

  • MD5

    6fb1bd17745f7433cb10054f29b88c21

  • SHA1

    d4b92ab577d30e2b5288485afec7b8a38b40c6a7

  • SHA256

    804cc4b5ce2196b6c678d9d3489bfbda406e895a60e86f6c7c3205628f5cbadc

  • SHA512

    7809b5898ab1ad78c6116242bbb0edafe8126cd16cc25cd7a01af998d68dbc1056130a3edea30e73506a5408608326ec9ada7fe3c2c6ebd36aa8e92b1fcd5b88

  • SSDEEP

    3072:pbaRlZBLaNOw+lDRR4oC3pagl0UJ9eX6oufK0aD:hgLXwgRR4oS0XuK0M

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://kamsmad.com/tmp/index.php

http://souzhensil.ru/tmp/index.php

http://teplokub.com.ua/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      804cc4b5ce2196b6c678d9d3489bfbda406e895a60e86f6c7c3205628f5cbadc

    • Size

      168KB

    • MD5

      6fb1bd17745f7433cb10054f29b88c21

    • SHA1

      d4b92ab577d30e2b5288485afec7b8a38b40c6a7

    • SHA256

      804cc4b5ce2196b6c678d9d3489bfbda406e895a60e86f6c7c3205628f5cbadc

    • SHA512

      7809b5898ab1ad78c6116242bbb0edafe8126cd16cc25cd7a01af998d68dbc1056130a3edea30e73506a5408608326ec9ada7fe3c2c6ebd36aa8e92b1fcd5b88

    • SSDEEP

      3072:pbaRlZBLaNOw+lDRR4oC3pagl0UJ9eX6oufK0aD:hgLXwgRR4oS0XuK0M

MITRE ATT&CK Enterprise v15

Tasks