General
- Target 7c6ff6ba9561a147d0111b903aa1914cd461efb6fde9e063767d43c10a83eaed
- Size 297KB
- Sample240408-f55bsshg89
- SHA256 7c6ff6ba9561a147d0111b903aa1914cd461efb6fde9e063767d43c10a83eaed
- MD5 e1bf96823e2f4849bf776d4eddb38c85
- SHA1 ce6939509ece9bf4f049d6dd0897c69e8d3701b6
- SHA512 5bdffab34779c26c6ae47e578d52ddb4e874b05bd1b7bdaaf223338a02dfe9217da75ac94f43e0c654ead2cfdcb1c188d2d4122b9f05ef5ecbbf43ed8768c4cb
- SSDEEP 6144:IgsGyhHtGi61qupnvkgLT9tkzIlQDyjiMT:InGyhHtGi611vkgLToU3
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7c6ff6ba9561a147d0111b903aa1914cd461efb6fde9e063767d43c10a83eaed.exe
Resource
win7-20240221-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
7c6ff6ba9561a147d0111b903aa1914cd461efb6fde9e063767d43c10a83eaed.exe
Resource
win10-20240404-en
3 signatures
300 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub3
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://nidoe.org/tmp/index.php
-
http://sodez.ru/tmp/index.php
-
http://uama.com.ua/tmp/index.php
-
http://talesofpirates.net/tmp/index.php
rc4.i32
rc4.i32
Targets
-
- Target 7c6ff6ba9561a147d0111b903aa1914cd461efb6fde9e063767d43c10a83eaed
- Size 297KB
- SHA256 7c6ff6ba9561a147d0111b903aa1914cd461efb6fde9e063767d43c10a83eaed
- MD5 e1bf96823e2f4849bf776d4eddb38c85
- SHA1 ce6939509ece9bf4f049d6dd0897c69e8d3701b6
- SHA512 5bdffab34779c26c6ae47e578d52ddb4e874b05bd1b7bdaaf223338a02dfe9217da75ac94f43e0c654ead2cfdcb1c188d2d4122b9f05ef5ecbbf43ed8768c4cb
- SSDEEP 6144:IgsGyhHtGi61qupnvkgLT9tkzIlQDyjiMT:InGyhHtGi611vkgLToU3
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself
-
Executes dropped EXE