General

  • Target

    b62c7e04c442ede27663d9d7f22578fb98fc1130bf072447e5fa5230fcb86f8c

  • Size

    321KB

  • Sample

    240318-ypl5dsgh67

  • MD5

    05a9889f824ab1a92ddfbd0e1cca2824

  • SHA1

    d1b6c579e9e5e8ff4a6842a1cc76cc3f37502462

  • SHA256

    b62c7e04c442ede27663d9d7f22578fb98fc1130bf072447e5fa5230fcb86f8c

  • SHA512

    5950403008663f4879e89b3030f504863ab6eb49f9a023077f0384c0e07745a5f1d0916b6e33a0e9cda98388a28b1457cbfc0d4d91c5d49581f4ce6bb19a95ee

  • SSDEEP

    3072:M+22XhioQqpTHsYjRLhE4J3s1wxWhrDUXnGN/EWsPPkFKlqPLf7bu1eFkr7:MiVQqpIY9C4JkwxWpI2AmKlqPgUu

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://nidoe.org/tmp/index.php

http://sodez.ru/tmp/index.php

http://uama.com.ua/tmp/index.php

http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      b62c7e04c442ede27663d9d7f22578fb98fc1130bf072447e5fa5230fcb86f8c

    • Size

      321KB

    • MD5

      05a9889f824ab1a92ddfbd0e1cca2824

    • SHA1

      d1b6c579e9e5e8ff4a6842a1cc76cc3f37502462

    • SHA256

      b62c7e04c442ede27663d9d7f22578fb98fc1130bf072447e5fa5230fcb86f8c

    • SHA512

      5950403008663f4879e89b3030f504863ab6eb49f9a023077f0384c0e07745a5f1d0916b6e33a0e9cda98388a28b1457cbfc0d4d91c5d49581f4ce6bb19a95ee

    • SSDEEP

      3072:M+22XhioQqpTHsYjRLhE4J3s1wxWhrDUXnGN/EWsPPkFKlqPLf7bu1eFkr7:MiVQqpIY9C4JkwxWpI2AmKlqPgUu

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks