General
- Target jaffacakes118_acf1b4c46d08a63929f63a4cca1d60f7a837ac9c66ba0544524cd2667fbb0cbf.bin
- Size 217KB
- Sample260922-mxw4sacd72
- SHA256 acf1b4c46d08a63929f63a4cca1d60f7a837ac9c66ba0544524cd2667fbb0cbf
- MD5 6468261c36526d0a9c146d6c8c400ace
- SHA1 963526a1dac09cb833ed5a102c740a6ca366f43a
- SHA512 72372f69476b9b106edda6851ac3af0c2ca80413344a255702fe8e376a236d07903822780ae9bc022c204f439f6ffc71debf803f3b4c4a68b090735cf5544469
- SSDEEP 3072:uHX93PzDScu+2Gkdhx2LL9ehoeptB7gTUBDHBu2O5+3T99c:U93Pzs+2drALkLFgQB9u213Ts
- TLSH T1AC24BEE07D52D471C417C0348820C6F0FA7A787697A889A737983F7F7D31292A7AE295
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_acf1b4c46d08a63929f63a4cca1d60f7a837ac9c66ba0544524cd2667fbb0cbf.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_acf1b4c46d08a63929f63a4cca1d60f7a837ac9c66ba0544524cd2667fbb0cbf.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub2
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gudintas.at/tmp/
-
http://pik96.ru/tmp/
-
http://rosatiauto.com/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target jaffacakes118_acf1b4c46d08a63929f63a4cca1d60f7a837ac9c66ba0544524cd2667fbb0cbf.bin
- Size 217KB
- SHA256 acf1b4c46d08a63929f63a4cca1d60f7a837ac9c66ba0544524cd2667fbb0cbf
- MD5 6468261c36526d0a9c146d6c8c400ace
- SHA1 963526a1dac09cb833ed5a102c740a6ca366f43a
- SHA512 72372f69476b9b106edda6851ac3af0c2ca80413344a255702fe8e376a236d07903822780ae9bc022c204f439f6ffc71debf803f3b4c4a68b090735cf5544469
- SSDEEP 3072:uHX93PzDScu+2Gkdhx2LL9ehoeptB7gTUBDHBu2O5+3T99c:U93Pzs+2drALkLFgQB9u213Ts
- TLSH T1AC24BEE07D52D471C417C0348820C6F0FA7A787697A889A737983F7F7D31292A7AE295
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself