General

  • Target

    898b3af6c5727d0ac2a779135292b70ce9662181ea4d93dc63ef8e17a5d357f9

  • Size

    317KB

  • Sample

    240328-2jby1sbb96

  • MD5

    9c77dd8aee6b58447e9d93cc15311d79

  • SHA1

    abc4b9d9ab9eeeb7dcc93ebe0f8d94e6a3ab8778

  • SHA256

    898b3af6c5727d0ac2a779135292b70ce9662181ea4d93dc63ef8e17a5d357f9

  • SHA512

    f7d1f56f4d34b557e3c43bd9a850a03256d0c86cb330c8503bed0d27ae45805cfceb1614579f6057f871bcfca683ad4522ccb4855d5d28aa9123413e7a9d7482

  • SSDEEP

    3072:04Njvk2umNXJ0p+GF/2vdX34UtHouCmVQrBUtFMrPhV8gA6ti2eCKGA:0ojvd0pg33tIdKswOnxti5hh

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Extracted

Family

smokeloader

Version

2022

C2

http://nidoe.org/tmp/index.php

http://sodez.ru/tmp/index.php

http://uama.com.ua/tmp/index.php

http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      898b3af6c5727d0ac2a779135292b70ce9662181ea4d93dc63ef8e17a5d357f9

    • Size

      317KB

    • MD5

      9c77dd8aee6b58447e9d93cc15311d79

    • SHA1

      abc4b9d9ab9eeeb7dcc93ebe0f8d94e6a3ab8778

    • SHA256

      898b3af6c5727d0ac2a779135292b70ce9662181ea4d93dc63ef8e17a5d357f9

    • SHA512

      f7d1f56f4d34b557e3c43bd9a850a03256d0c86cb330c8503bed0d27ae45805cfceb1614579f6057f871bcfca683ad4522ccb4855d5d28aa9123413e7a9d7482

    • SSDEEP

      3072:04Njvk2umNXJ0p+GF/2vdX34UtHouCmVQrBUtFMrPhV8gA6ti2eCKGA:0ojvd0pg33tIdKswOnxti5hh

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks