General

  • Target

    15584ea7dd6e4657ba0d3c3f26cfa6efdee844798ed46710f767714eb27d8729

  • Size

    301KB

  • Sample

    240425-ba3ghace7w

  • MD5

    731ac3028835a9b371289d5d03ced63c

  • SHA1

    d08942f201bb1dda797cd32ff6a54896bc6a35b5

  • SHA256

    15584ea7dd6e4657ba0d3c3f26cfa6efdee844798ed46710f767714eb27d8729

  • SHA512

    3620c2458e81a05587bb0fa134a22f80e2913a3a820c4599eb45cfa85658498bfb6605f82096feb7fc90487e0158af61dd36260cf0dff6400f8dcdcefb234b88

  • SSDEEP

    3072:ynCFxO+TAA13++k9WfT6f4A4o2iFw7AiznXEM1KIolCZsi5lKs3svegpG:h0+P3rfT6f4AiirizUy7oksuhc

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://nidoe.org/tmp/index.php

http://sodez.ru/tmp/index.php

http://uama.com.ua/tmp/index.php

http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      15584ea7dd6e4657ba0d3c3f26cfa6efdee844798ed46710f767714eb27d8729

    • Size

      301KB

    • MD5

      731ac3028835a9b371289d5d03ced63c

    • SHA1

      d08942f201bb1dda797cd32ff6a54896bc6a35b5

    • SHA256

      15584ea7dd6e4657ba0d3c3f26cfa6efdee844798ed46710f767714eb27d8729

    • SHA512

      3620c2458e81a05587bb0fa134a22f80e2913a3a820c4599eb45cfa85658498bfb6605f82096feb7fc90487e0158af61dd36260cf0dff6400f8dcdcefb234b88

    • SSDEEP

      3072:ynCFxO+TAA13++k9WfT6f4A4o2iFw7AiznXEM1KIolCZsi5lKs3svegpG:h0+P3rfT6f4AiirizUy7oksuhc

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks