General
- Target jaffacakes118_cb96c7d85753b6c5871003b7fb35bfec31fb411e3dd5c77cc9471a0afa93d5b7.bin
- Size 219KB
- Sample260922-nmlezavbqe
- SHA256 cb96c7d85753b6c5871003b7fb35bfec31fb411e3dd5c77cc9471a0afa93d5b7
- MD5 9dae7780672a99726091d3edb6d9649f
- SHA1 48e57242abcadec1b2508fc6b283ac6c2dcb37db
- SHA512 115585ff693038f91c6239559a72c07578f6a7048b260d03ea3987db72b92efe50783f0589d362da5be6361f0835a3a7026d461e84d12bfd20803bfdf4f598d2
- SSDEEP 3072:V5/ORGiUBZhAi/V4BsvvRXmzspZb6EhWAG55/QOxdg3:vGUDJAQfldzy9
- TLSH T16F248E2362B27C51E967A7728E2EF6E8392EF451CFE5675A32145A1F09701F2C273312
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_cb96c7d85753b6c5871003b7fb35bfec31fb411e3dd5c77cc9471a0afa93d5b7.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_cb96c7d85753b6c5871003b7fb35bfec31fb411e3dd5c77cc9471a0afa93d5b7.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub1
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gudintas.at/tmp/
-
http://pik96.ru/tmp/
-
http://rosatiauto.com/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target jaffacakes118_cb96c7d85753b6c5871003b7fb35bfec31fb411e3dd5c77cc9471a0afa93d5b7.bin
- Size 219KB
- SHA256 cb96c7d85753b6c5871003b7fb35bfec31fb411e3dd5c77cc9471a0afa93d5b7
- MD5 9dae7780672a99726091d3edb6d9649f
- SHA1 48e57242abcadec1b2508fc6b283ac6c2dcb37db
- SHA512 115585ff693038f91c6239559a72c07578f6a7048b260d03ea3987db72b92efe50783f0589d362da5be6361f0835a3a7026d461e84d12bfd20803bfdf4f598d2
- SSDEEP 3072:V5/ORGiUBZhAi/V4BsvvRXmzspZb6EhWAG55/QOxdg3:vGUDJAQfldzy9
- TLSH T16F248E2362B27C51E967A7728E2EF6E8392EF451CFE5675A32145A1F09701F2C273312
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself