General

  • Target

    bc7a7c82616beb648a3b44f3009b33962c8a7e593bfb0dcf238b406c71c4349f

  • Size

    139KB

  • Sample

    240417-sa83qadb58

  • MD5

    ca8068592860ca3cd4dd1f5fe6cd9249

  • SHA1

    fedf4a903a6ec811e64005f301bf8f4c20938abb

  • SHA256

    bc7a7c82616beb648a3b44f3009b33962c8a7e593bfb0dcf238b406c71c4349f

  • SHA512

    f52dcf428f25b8f84ec4dd245f484c3378c169e87ae9cc837c9e29193c494843ca884bb76139b275de35554b61cb6721f4bf52c2abdf848798659d07251b4deb

  • SSDEEP

    3072:G26dXESBM+Ooha1j9YZMnJ1jhPzL+d2xqszJwbLcoAjJ+9Yyj8L:G26BESBsohahEMjhPH+dqzJsLcoAjJq+

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://onualituyrs.org/

http://sumagulituyo.org/

http://snukerukeutit.org/

http://lightseinsteniki.org/

http://liuliuoumumy.org/

http://stualialuyastrelia.net/

http://kumbuyartyty.net/

http://criogetikfenbut.org/

http://tonimiuyaytre.org/

http://tyiuiunuewqy.org/

rc4.i32
rc4.i32

Targets

    • Target

      d993da5b179af8c4c4a3a29ba72182f51e47311205c7830f9cca88ec71328240.exe

    • Size

      201KB

    • MD5

      f3f4a4624d1582e449b54bb8df87ce03

    • SHA1

      87d3fe682b21f26708a1ad47d8abfe14c745016d

    • SHA256

      d993da5b179af8c4c4a3a29ba72182f51e47311205c7830f9cca88ec71328240

    • SHA512

      d706dd6e4157560f381456a4aafd517194162ae6a85e9644caaa9fafcd28217ecaba4c71631299ca3ffea505b1ea99ddb80422fdbe3f07fa1962eaaf09cdbac1

    • SSDEEP

      3072:X894PLOYs3gaZRjtceAOkBPJKDrWNXkprqo6+hrPREQpCfG+o:M9gLOY4gaZFmRpJKGArFFPRuf4

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks