General

  • Target

    083cd293268c04593aed4ab2a89e31b7c694980aa32e6dcfde239a4cfdc28afc

  • Size

    304KB

  • Sample

    240406-wzje5sfc5s

  • MD5

    2610e965a06e11cddd08e637b2620da8

  • SHA1

    a0e7b3c36964613e2060b4c07d6b581221c9502a

  • SHA256

    083cd293268c04593aed4ab2a89e31b7c694980aa32e6dcfde239a4cfdc28afc

  • SHA512

    c5ed28380eb12916d09b0d81a0d6ec877b5028cbdcb045ed7b8f8dd9e4890c26422883aa546ceb6b26a92c86148f07bb02a1795cbe37d7380386322c33c79b56

  • SSDEEP

    3072:77+9mRLwmKaU2dQ1citrsV+FdgsH/4iyjjHTzJGvkTzX3VE51zdR6+B:v+sLI2dHUi+l4njjH5GeWzdRV

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://sjyey.com/tmp/index.php

http://babonwo.ru/tmp/index.php

http://mth.com.ua/tmp/index.php

http://piratia.pw/tmp/index.php

http://go-piratia.ru/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      083cd293268c04593aed4ab2a89e31b7c694980aa32e6dcfde239a4cfdc28afc

    • Size

      304KB

    • MD5

      2610e965a06e11cddd08e637b2620da8

    • SHA1

      a0e7b3c36964613e2060b4c07d6b581221c9502a

    • SHA256

      083cd293268c04593aed4ab2a89e31b7c694980aa32e6dcfde239a4cfdc28afc

    • SHA512

      c5ed28380eb12916d09b0d81a0d6ec877b5028cbdcb045ed7b8f8dd9e4890c26422883aa546ceb6b26a92c86148f07bb02a1795cbe37d7380386322c33c79b56

    • SSDEEP

      3072:77+9mRLwmKaU2dQ1citrsV+FdgsH/4iyjjHTzJGvkTzX3VE51zdR6+B:v+sLI2dHUi+l4njjH5GeWzdRV

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks