General

  • Target

    37419d3a8a50d2e5bc0eef676a37d6757ba43a64eff868edb4af5c386900235f.zip

  • Size

    154KB

  • Sample

    240426-sjw5hseb66

  • MD5

    32acabed6edca549795de152bafca74f

  • SHA1

    f74fea063b8ba321b950a9507139fa5fca6c55e6

  • SHA256

    ea33703fd5a3fc1a12294091703ebbdce05405818ac839d7800063782e494119

  • SHA512

    7781bf25690388ad027a9f8c319a36002bbdf2f8e61dc3eee4bd0a4fc4287e7b6b320c2cd7110a1d33efe74a6801440bb6e647e181434289096f703411d50f93

  • SSDEEP

    3072:vDKa/vnpzee0MEJRnvMUrZ2HLc9Hs5aw7WCNvVvJcMFm04:vDJpze7MEDnJrkHL8HsPWCNtvJlg04

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://potunulit.org/

http://hutnilior.net/

http://bulimu55t.net/

http://soryytlic4.net/

http://novanosa5org.org/

http://nuljjjnuli.org/

http://tolilolihul.net/

http://somatoka51hub.net/

http://hujukui3.net/

http://bukubuka1.net/

http://golilopaster.org/

http://newzelannd66.org/

http://otriluyttn.org/

rc4.i32
rc4.i32

Targets

    • Target

      37419d3a8a50d2e5bc0eef676a37d6757ba43a64eff868edb4af5c386900235f.exe

    • Size

      248KB

    • MD5

      1f243595efaa54f6c37a089ec7847c6d

    • SHA1

      83eb38d9f85bdcf12cb781fad34ceb1e31b34b5a

    • SHA256

      37419d3a8a50d2e5bc0eef676a37d6757ba43a64eff868edb4af5c386900235f

    • SHA512

      58e936e2c5b44a489c75494102228d11d6aa6d3e26e687f20923437c1d44b2e9af5533e3ea53c178c2bc70d656f913158dbc0f5cd8cdc7a3738cba8ad6cbff55

    • SSDEEP

      3072:IDGh7pXYLE2d5+8XTQhtetONYWO9jfBU393KySv53brCTxI:RpXYLEcfXT3hRfG3kyevCFI

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks