General

  • Target

    f262b7879a9457e28a2760cb795eea00fff16f9fe34ebbb82348125c8f54103f

  • Size

    290KB

  • Sample

    240405-bb7slsfe4z

  • MD5

    ed6d377fd013ceda5282bb2e9efbc7ff

  • SHA1

    e90d16d0e0ea8fe89cbb1fe216039acdbffbec9f

  • SHA256

    f262b7879a9457e28a2760cb795eea00fff16f9fe34ebbb82348125c8f54103f

  • SHA512

    72ace885187d5b61f9aa023091913e323ac250594964f2c4b031f73f31d9cfd1cd89498a7955428da0bd10f996a89f381ba67f06f798aebcf339fbff91ec3f19

  • SSDEEP

    3072:aDxkMaPJYEac90jWB873jjNBjW9rm2K9FOgx0xEVKZ6OKKs6vg33qN:aSxRYEac9008fjNByxLvCyEcNPg33q

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://nidoe.org/tmp/index.php

http://sodez.ru/tmp/index.php

http://uama.com.ua/tmp/index.php

http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      f262b7879a9457e28a2760cb795eea00fff16f9fe34ebbb82348125c8f54103f

    • Size

      290KB

    • MD5

      ed6d377fd013ceda5282bb2e9efbc7ff

    • SHA1

      e90d16d0e0ea8fe89cbb1fe216039acdbffbec9f

    • SHA256

      f262b7879a9457e28a2760cb795eea00fff16f9fe34ebbb82348125c8f54103f

    • SHA512

      72ace885187d5b61f9aa023091913e323ac250594964f2c4b031f73f31d9cfd1cd89498a7955428da0bd10f996a89f381ba67f06f798aebcf339fbff91ec3f19

    • SSDEEP

      3072:aDxkMaPJYEac90jWB873jjNBjW9rm2K9FOgx0xEVKZ6OKKs6vg33qN:aSxRYEac9008fjNByxLvCyEcNPg33q

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks