General

  • Target

    37419d3a8a50d2e5bc0eef676a37d6757ba43a64eff868edb4af5c386900235f.zip

  • Size

    154KB

  • Sample

    240419-npp6yabd8x

  • MD5

    f66d5180ba2d1fac861fc33ccd29b03d

  • SHA1

    febde7108ba2ab73d284fff706aa2da542986e05

  • SHA256

    eb84b83b6d29364d1933f4470719c10b77202a334a84a29ee8b6a4e61908260f

  • SHA512

    5eaa71efca07bd0aca4144c6e7e6dd29651e94a234057f728d86208b97cd49c45e5d21ffd135705c824033438812128f5478d38dc1373a1c17fca8cbb5c85e69

  • SSDEEP

    3072:kRPqkBmxU9p44YBFAO/R6GCB+DPP3XtJf25t7+4IEY7CRVGS:rkVpnYkgfCsPP3XXf2v7rBYW6S

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://potunulit.org/

http://hutnilior.net/

http://bulimu55t.net/

http://soryytlic4.net/

http://novanosa5org.org/

http://nuljjjnuli.org/

http://tolilolihul.net/

http://somatoka51hub.net/

http://hujukui3.net/

http://bukubuka1.net/

http://golilopaster.org/

http://newzelannd66.org/

http://otriluyttn.org/

rc4.i32
rc4.i32

Targets

    • Target

      37419d3a8a50d2e5bc0eef676a37d6757ba43a64eff868edb4af5c386900235f.exe

    • Size

      248KB

    • MD5

      1f243595efaa54f6c37a089ec7847c6d

    • SHA1

      83eb38d9f85bdcf12cb781fad34ceb1e31b34b5a

    • SHA256

      37419d3a8a50d2e5bc0eef676a37d6757ba43a64eff868edb4af5c386900235f

    • SHA512

      58e936e2c5b44a489c75494102228d11d6aa6d3e26e687f20923437c1d44b2e9af5533e3ea53c178c2bc70d656f913158dbc0f5cd8cdc7a3738cba8ad6cbff55

    • SSDEEP

      3072:IDGh7pXYLE2d5+8XTQhtetONYWO9jfBU393KySv53brCTxI:RpXYLEcfXT3hRfG3kyevCFI

MITRE ATT&CK Enterprise v15

Tasks