General

  • Target

    %APPDATA%vcutvew.exe

  • Size

    276KB

  • Sample

    240418-pad1ssdh4w

  • MD5

    d67acaddbe44a3febc3348f75a22888d

  • SHA1

    3be875b32727db74827d630c042b2d0be5b622d2

  • SHA256

    03a83e440c0d1d8f9390f8edf180c54aa4111a39c2b00a05650e4d47e613c754

  • SHA512

    9ede4dd37984a784f856cbbc275fc567d885f55fc4af809c177ab17dc257e6eeef67d2ac182ee75090b99ce5d5305a9fe7367669d75ad11d02624da44eb7093a

  • SSDEEP

    3072:nX0N0TTuUimSJFE4GGnTDUSMdxYw5YX0xpqopUTcIxAoUvt1Zq7:XxTFSTfJnMSMsBkxpFWy0

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://onualituyrs.org/

http://sumagulituyo.org/

http://snukerukeutit.org/

http://lightseinsteniki.org/

http://liuliuoumumy.org/

http://stualialuyastrelia.net/

http://kumbuyartyty.net/

http://criogetikfenbut.org/

http://tonimiuyaytre.org/

http://tyiuiunuewqy.org/

rc4.i32
rc4.i32

Targets

    • Target

      %APPDATA%vcutvew.exe

    • Size

      276KB

    • MD5

      d67acaddbe44a3febc3348f75a22888d

    • SHA1

      3be875b32727db74827d630c042b2d0be5b622d2

    • SHA256

      03a83e440c0d1d8f9390f8edf180c54aa4111a39c2b00a05650e4d47e613c754

    • SHA512

      9ede4dd37984a784f856cbbc275fc567d885f55fc4af809c177ab17dc257e6eeef67d2ac182ee75090b99ce5d5305a9fe7367669d75ad11d02624da44eb7093a

    • SSDEEP

      3072:nX0N0TTuUimSJFE4GGnTDUSMdxYw5YX0xpqopUTcIxAoUvt1Zq7:XxTFSTfJnMSMsBkxpFWy0

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks