General

  • Target

    d671b17afb9e245e629823dccd61d78257df00834fb2b1fa9431c6439c62fd45.exe

  • Size

    294KB

  • Sample

    240413-bscnssce9s

  • MD5

    73c5e5058bdb7449f2e38f1c7645b9ad

  • SHA1

    e9b584910e84b4af4394d944fd178d2b110c5c96

  • SHA256

    d671b17afb9e245e629823dccd61d78257df00834fb2b1fa9431c6439c62fd45

  • SHA512

    0fb7942508977e8f94dc74c6b3d3e29d2236945896c61b0c7a2a0a3e8e8cd68f3f6985e53208e213f35acc34e290a01eb3534e91577f28f7b7abe06cfe6ed69c

  • SSDEEP

    3072:VOeQ/4QgHDEGn6R3U23Kc+m+vNR2T+wtkeJleNMnIVzwlxyMBzfSz+RDRn/7Yoi:1XEzk23p9iVwtTkMnJlwMBzfhxh/7e

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://nidoe.org/tmp/index.php

http://sodez.ru/tmp/index.php

http://uama.com.ua/tmp/index.php

http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      d671b17afb9e245e629823dccd61d78257df00834fb2b1fa9431c6439c62fd45.exe

    • Size

      294KB

    • MD5

      73c5e5058bdb7449f2e38f1c7645b9ad

    • SHA1

      e9b584910e84b4af4394d944fd178d2b110c5c96

    • SHA256

      d671b17afb9e245e629823dccd61d78257df00834fb2b1fa9431c6439c62fd45

    • SHA512

      0fb7942508977e8f94dc74c6b3d3e29d2236945896c61b0c7a2a0a3e8e8cd68f3f6985e53208e213f35acc34e290a01eb3534e91577f28f7b7abe06cfe6ed69c

    • SSDEEP

      3072:VOeQ/4QgHDEGn6R3U23Kc+m+vNR2T+wtkeJleNMnIVzwlxyMBzfSz+RDRn/7Yoi:1XEzk23p9iVwtTkMnJlwMBzfhxh/7e

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks