General

  • Target

    c444868d4cbbecd4c7083de14310fcc934d9e60a2c41de4a30057044acd9b962

  • Size

    203KB

  • Sample

    240312-2eav6aee33

  • MD5

    1c4afaf122db4aa6233be22a3f761b4f

  • SHA1

    0c65463254fefdcb1af5332245c181c45594d5ea

  • SHA256

    c444868d4cbbecd4c7083de14310fcc934d9e60a2c41de4a30057044acd9b962

  • SHA512

    aa4d95ef44ea5b72692f6de45940480ebc2744db8a8bad42bd4f84e514fb5ede59324578db80c64bd53db533fe32003be7f429bee5f444998d444f41234d26c0

  • SSDEEP

    3072:+DtO2LbVS5fgevom6PJiMrt+NqaDTQIdEsrTjeJplaYD16TxZRUr7D:c3LbfGMT05BvKExSf

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Extracted

Family

smokeloader

Version

2022

C2

http://gxutc2c.com/tmp/index.php

http://proekt8.ru/tmp/index.php

http://mth.com.ua/tmp/index.php

http://pirateking.online/tmp/index.php

http://piratia.pw/tmp/index.php

http://go-piratia.ru/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      c444868d4cbbecd4c7083de14310fcc934d9e60a2c41de4a30057044acd9b962

    • Size

      203KB

    • MD5

      1c4afaf122db4aa6233be22a3f761b4f

    • SHA1

      0c65463254fefdcb1af5332245c181c45594d5ea

    • SHA256

      c444868d4cbbecd4c7083de14310fcc934d9e60a2c41de4a30057044acd9b962

    • SHA512

      aa4d95ef44ea5b72692f6de45940480ebc2744db8a8bad42bd4f84e514fb5ede59324578db80c64bd53db533fe32003be7f429bee5f444998d444f41234d26c0

    • SSDEEP

      3072:+DtO2LbVS5fgevom6PJiMrt+NqaDTQIdEsrTjeJplaYD16TxZRUr7D:c3LbfGMT05BvKExSf

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks