General

  • Target

    b356fa822d972cfa52e750a17f22276913791eeab616b883f645b8e0b8d0a708

  • Size

    240KB

  • Sample

    240418-22hvaahd87

  • MD5

    65d1d7c7fce72369e8ad09373eba8d32

  • SHA1

    903437fe93bf29d905120edb74af6201e4e09e77

  • SHA256

    b356fa822d972cfa52e750a17f22276913791eeab616b883f645b8e0b8d0a708

  • SHA512

    6bf83b232c06126cf638dbd58299209cf87c87d2191118dea133a17cc854fea261644401f262e090c02b6e4b02ce5bb77942260f497ee030fe164ae0f2f58387

  • SSDEEP

    1536:8qBd3rlHAEdOKLfoS8wuTkaJ9Gw8v88oSWx4SdupBeqnx+30IpZoTkbV5uqevlME:rHAEoKLg7fcKSOUM4+7Jp5uqwyR5eU6

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://nidoe.org/tmp/index.php

http://sodez.ru/tmp/index.php

http://uama.com.ua/tmp/index.php

http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      b356fa822d972cfa52e750a17f22276913791eeab616b883f645b8e0b8d0a708

    • Size

      240KB

    • MD5

      65d1d7c7fce72369e8ad09373eba8d32

    • SHA1

      903437fe93bf29d905120edb74af6201e4e09e77

    • SHA256

      b356fa822d972cfa52e750a17f22276913791eeab616b883f645b8e0b8d0a708

    • SHA512

      6bf83b232c06126cf638dbd58299209cf87c87d2191118dea133a17cc854fea261644401f262e090c02b6e4b02ce5bb77942260f497ee030fe164ae0f2f58387

    • SSDEEP

      1536:8qBd3rlHAEdOKLfoS8wuTkaJ9Gw8v88oSWx4SdupBeqnx+30IpZoTkbV5uqevlME:rHAEoKLg7fcKSOUM4+7Jp5uqwyR5eU6

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks