General

  • Target

    083c9a8679034f65137bce38b2f1db98225a8d1f18dc351ee4d5adfc464fa72b.zip

  • Size

    148KB

  • Sample

    240402-mltjhsfa8x

  • MD5

    935e9237fb3f495bc2591e416494733c

  • SHA1

    82945fe9970db65cdf76d07ebc1a4c152fcb26e2

  • SHA256

    ada03a192ccc57fbbcf7b45efd3c69c1f8059b1c714e07bc7d180f9b9165a24c

  • SHA512

    cb535b493e05ab5c39cd60183d83f084bcf2c8456ab116bbaa04a5fcf5f232cefc7f9ebe5a60ffa31b174307884d9e49597aab27febf53b6b24f97b2e7704c45

  • SSDEEP

    3072:D0Kg4H16EnnjVgBKnxQd3s58yoX8Zk0YiH+5QhPHdz:NIEnn6gm3sSP2kB52Pdz

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://nidoe.org/tmp/index.php

http://sodez.ru/tmp/index.php

http://uama.com.ua/tmp/index.php

http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      083c9a8679034f65137bce38b2f1db98225a8d1f18dc351ee4d5adfc464fa72b.exe

    • Size

      267KB

    • MD5

      8b2f1a0f480177fe032cbf896442a44e

    • SHA1

      96099aced1b2724dd7fc56f6978802b87aeebaab

    • SHA256

      083c9a8679034f65137bce38b2f1db98225a8d1f18dc351ee4d5adfc464fa72b

    • SHA512

      ca454ca2e172f1ec7d1cf22a2c2a3085692c1ff58a3c37e83cfbbc87623702879b9e2d0fe3a17dd609bcfe5ed5daf9181219ec0f0ecacacaf6136fd1b73758be

    • SSDEEP

      3072:8LZMm58BE5RRc8+HBi1/G66Czp+lbWhXrcrB0F0VC2MZUrTTk3:8KEVc8dH6ColYrcrB0F0k2MZmTT

MITRE ATT&CK Enterprise v15

Tasks