Overview
overview
7Static
static
7BotNets/Sm...er.exe
windows7-x64
7BotNets/Sm...er.exe
windows10-2004-x64
7BotNets/Sm...er.exe
windows7-x64
1BotNets/Sm...er.exe
windows10-2004-x64
1BotNets/Sm...x.html
windows7-x64
1BotNets/Sm...x.html
windows10-2004-x64
1BotNets/Sm...x.html
windows7-x64
1BotNets/Sm...x.html
windows10-2004-x64
1BotNets/Sm...x.html
windows7-x64
1BotNets/Sm...x.html
windows10-2004-x64
1BotNets/Sm...x.html
windows7-x64
1BotNets/Sm...x.html
windows10-2004-x64
1BotNets/Sm...oip.js
windows7-x64
1BotNets/Sm...oip.js
windows10-2004-x64
1BotNets/Sm...x.html
windows7-x64
1BotNets/Sm...x.html
windows10-2004-x64
1BotNets/Sm...x.html
windows7-x64
1BotNets/Sm...x.html
windows10-2004-x64
1BotNets/Sm...x.html
windows7-x64
1BotNets/Sm...x.html
windows10-2004-x64
1BotNets/Sm...x.html
windows7-x64
1BotNets/Sm...x.html
windows10-2004-x64
1BotNets/Sm...er.exe
windows7-x64
7BotNets/Sm...er.exe
windows10-2004-x64
7BotNets/Th...de.pdf
windows7-x64
1BotNets/Th...de.pdf
windows10-2004-x64
1BotNets/Wa...al.url
windows7-x64
1BotNets/Wa...al.url
windows10-2004-x64
1BotNets/Wa...be.exe
windows7-x64
1BotNets/Wa...be.exe
windows10-2004-x64
1BotNets/Wa...be.exe
windows7-x64
1BotNets/Wa...be.exe
windows10-2004-x64
1Analysis
- max time kernel
1790s - max time network
1570s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system - submitted
04/04/2024, 17:02
Behavioral task
behavioral1
Sample
BotNets/SmokeBot/Builder.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
BotNets/SmokeBot/Builder.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
BotNets/SmokeBot/SmokeBuilder.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral4
Sample
BotNets/SmokeBot/SmokeBuilder.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
BotNets/SmokeBot/admin/data/index.html
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral6
Sample
BotNets/SmokeBot/admin/data/index.html
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
BotNets/SmokeBot/admin/exe/index.html
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral8
Sample
BotNets/SmokeBot/admin/exe/index.html
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
BotNets/SmokeBot/admin/imgs/flags/index.html
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral10
Sample
BotNets/SmokeBot/admin/imgs/flags/index.html
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
BotNets/SmokeBot/admin/imgs/os/index.html
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral12
Sample
BotNets/SmokeBot/admin/imgs/os/index.html
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
BotNets/SmokeBot/admin/inc/geoip.js
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral14
Sample
BotNets/SmokeBot/admin/inc/geoip.js
Resource
win10v2004-20240319-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
BotNets/SmokeBot/admin/inc/index.html
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral16
Sample
BotNets/SmokeBot/admin/inc/index.html
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
BotNets/SmokeBot/admin/index.html
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral18
Sample
BotNets/SmokeBot/admin/index.html
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
BotNets/SmokeBot/admin/mods/index.html
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral20
Sample
BotNets/SmokeBot/admin/mods/index.html
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
BotNets/SmokeBot/admin/shell/index.html
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral22
Sample
BotNets/SmokeBot/admin/shell/index.html
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
BotNets/SmokeBot/tools/Parser.exe
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral24
Sample
BotNets/SmokeBot/tools/Parser.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
BotNets/The Botnet Guide.pdf
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral26
Sample
BotNets/The Botnet Guide.pdf
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
BotNets/WarBot/(HTTP Botnet) Warbot Botnet Tutorial.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral28
Sample
BotNets/WarBot/(HTTP Botnet) Warbot Botnet Tutorial.url
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
BotNets/WarBot/WarBot/Builder & Bot/Builder & Bot/RedTube.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral30
Sample
BotNets/WarBot/WarBot/Builder & Bot/Builder & Bot/RedTube.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
BotNets/WarBot/WarBot/Builder & Bot/RedTube.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral32
Sample
BotNets/WarBot/WarBot/Builder & Bot/RedTube.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
General
- Target BotNets/SmokeBot/tools/Parser.exe
- Size 159KB
- Sample240404-vkchlsdg73
- SHA256 f646ae693b297d12a62bbc130ceb536539d42e6fae4bd835de3e594e0fa0b07c
- MD5 139ed6ade0b105e35208e5e02fda8a12
- SHA1 fb078d770769609aef61e4cb4c273356d380def9
- SHA512 7f4f9e0da81ebd68c4f82dc94c6a3f53e5c30481a47bbb5b44cd0bca48b10bcc0234bfba830a0d8a32b1caf1bfd7a0946516113085c6563ad15f0ea4a26d92b1
- SSDEEP 3072:QUvOPctYN71FgRn6hQbxZQ26fWZ+NTiHTtlLG4gKqN3doaz+fdG:QEOPc2NJFgRnmQbxZPwrtizXhgBNNo2O
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral23/memory/2220-0-0x0000000000400000-0x000000000046B000-memory.dmp upx behavioral23/memory/2220-2-0x0000000000400000-0x000000000046B000-memory.dmp upx