General
- Target jaffacakes118_4ceba0f9161d737e051ca266570a099d1235b6b7210e16a3756153308290ccbf.bin
- Size 265KB
- Sample260922-a2s7gavaph
- SHA256 4ceba0f9161d737e051ca266570a099d1235b6b7210e16a3756153308290ccbf
- MD5 b3bb36f4786010494081b3e2e20abc44
- SHA1 253752418780c015f01b827c3ddf3619280a2f8d
- SHA512 f17686c0d8016f925c448fefe864bdffb951c3188c4875b02c98b540a17b0036415d3dbc1ee8f8d7c740678108c159565215465adeb8d971e0c4da08c5838e75
- SSDEEP 3072:jkUTAlX9xoJmKLwdht6H3Ls0rZDvg2rfykbOPzQ76F1R1abMbOz1:IUmX5/ht6H7Dl42rqkb8EG1L12
- TLSH T12B445B1352D17861EF234A318E2AF6E42E1EB9604F5536BA1F685E2FC9709F1F16230D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_4ceba0f9161d737e051ca266570a099d1235b6b7210e16a3756153308290ccbf.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_4ceba0f9161d737e051ca266570a099d1235b6b7210e16a3756153308290ccbf.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://dpav.cc/tmp/
-
http://lrproduct.ru/tmp/
-
http://kggcp.com/tmp/
-
http://talesofpirates.net/tmp/
-
http://pirateking.online/tmp/
-
http://piratia.pw/tmp/
-
http://go-piratia.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target jaffacakes118_4ceba0f9161d737e051ca266570a099d1235b6b7210e16a3756153308290ccbf.bin
- Size 265KB
- SHA256 4ceba0f9161d737e051ca266570a099d1235b6b7210e16a3756153308290ccbf
- MD5 b3bb36f4786010494081b3e2e20abc44
- SHA1 253752418780c015f01b827c3ddf3619280a2f8d
- SHA512 f17686c0d8016f925c448fefe864bdffb951c3188c4875b02c98b540a17b0036415d3dbc1ee8f8d7c740678108c159565215465adeb8d971e0c4da08c5838e75
- SSDEEP 3072:jkUTAlX9xoJmKLwdht6H3Ls0rZDvg2rfykbOPzQ76F1R1abMbOz1:IUmX5/ht6H7Dl42rqkb8EG1L12
- TLSH T12B445B1352D17861EF234A318E2AF6E42E1EB9604F5536BA1F685E2FC9709F1F16230D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself