General

  • Target
    SecuriteInfo.com.Win32.PWSX-gen.16966.19531.exe
  • Size 325KB
  • Sample240412-ja8yaagg24
  • SHA256 0b3d482dd4c05dafe53de7afbef7d8d13a62c687a7e705c212fcfe536ec22d9e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub3

Extracted

Family
  • smokeloader

Version
  • 2022

C2
  • http://nidoe.org/tmp/index.php

  • http://sodez.ru/tmp/index.php

  • http://uama.com.ua/tmp/index.php

  • http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target
      SecuriteInfo.com.Win32.PWSX-gen.16966.19531.exe
    • Size 325KB
    • SHA256 0b3d482dd4c05dafe53de7afbef7d8d13a62c687a7e705c212fcfe536ec22d9e
    • MD5 SHA1 SHA512 SSDEEP

MITRE ATT&CK Enterprise v15

Tasks