General

  • Target

    bffdeefb46f1ed33acb786df81d76363f176e9610dc8fee952ebb547f6b5c930

  • Size

    317KB

  • Sample

    240328-2myl7abd36

  • MD5

    4e0571d3d2d15e9b4697d7fa87d4c6c1

  • SHA1

    a9a050c2918abf55ca856e5c0bb89d2a974ffc81

  • SHA256

    bffdeefb46f1ed33acb786df81d76363f176e9610dc8fee952ebb547f6b5c930

  • SHA512

    825ac047bf86a4039cf2a7a7045e0818336cc3e2c6ad015c9117898f6e9423969ace98c323ea937c3bae40943e402a3bc08e3ec5338306585296fc4bb8c03309

  • SSDEEP

    3072:tttjzLr18qELUp+GF/2vsXt4yGEdnzPegq10i5I1zxuV9UQ8Kbsne/fA6F8eCKG:tzjzqUpxt1ln7e910EIdxwUwBfxFPhh

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://nidoe.org/tmp/index.php

http://sodez.ru/tmp/index.php

http://uama.com.ua/tmp/index.php

http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      bffdeefb46f1ed33acb786df81d76363f176e9610dc8fee952ebb547f6b5c930

    • Size

      317KB

    • MD5

      4e0571d3d2d15e9b4697d7fa87d4c6c1

    • SHA1

      a9a050c2918abf55ca856e5c0bb89d2a974ffc81

    • SHA256

      bffdeefb46f1ed33acb786df81d76363f176e9610dc8fee952ebb547f6b5c930

    • SHA512

      825ac047bf86a4039cf2a7a7045e0818336cc3e2c6ad015c9117898f6e9423969ace98c323ea937c3bae40943e402a3bc08e3ec5338306585296fc4bb8c03309

    • SSDEEP

      3072:tttjzLr18qELUp+GF/2vsXt4yGEdnzPegq10i5I1zxuV9UQ8Kbsne/fA6F8eCKG:tzjzqUpxt1ln7e910EIdxwUwBfxFPhh

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks