General
- Target jaffacakes118_5ccbf427664cdbe8cff5e9be607256edfc54cf258c64ba176f9d981ab9269b5f.bin
- Size 306KB
- Sample260922-p4s2tatvbv
- SHA256 5ccbf427664cdbe8cff5e9be607256edfc54cf258c64ba176f9d981ab9269b5f
- MD5 8489787b83368ed020e05f9b27edb287
- SHA1 987aa01e327c4433fa23857eb8abbf113a4acecd
- SHA512 d3f6be66def2e5d882f9d5b8b9cab35692d4f4bd82ea5f272af518edd6606e9a75c611bbf51b524103c48dab61a9def7dcd782a5cc687db43ee1832b0ff9dc17
- SSDEEP 3072:Wwl8ZN0L7ba/0p1SZ2rqHddCkaiSGPKeDOjcQlHkzHRse9zsMLU0lvS:tl8/0nba/0GZCqHDCrgP27yxse9z7
- TLSH T10E646C13D3E17C61E5664B319E2EC2E8771EF2108E69377B2258BA2B09B05F2D673711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_5ccbf427664cdbe8cff5e9be607256edfc54cf258c64ba176f9d981ab9269b5f.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_5ccbf427664cdbe8cff5e9be607256edfc54cf258c64ba176f9d981ab9269b5f.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub1
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gudintas.at/tmp/
-
http://pik96.ru/tmp/
-
http://rosatiauto.com/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target jaffacakes118_5ccbf427664cdbe8cff5e9be607256edfc54cf258c64ba176f9d981ab9269b5f.bin
- Size 306KB
- SHA256 5ccbf427664cdbe8cff5e9be607256edfc54cf258c64ba176f9d981ab9269b5f
- MD5 8489787b83368ed020e05f9b27edb287
- SHA1 987aa01e327c4433fa23857eb8abbf113a4acecd
- SHA512 d3f6be66def2e5d882f9d5b8b9cab35692d4f4bd82ea5f272af518edd6606e9a75c611bbf51b524103c48dab61a9def7dcd782a5cc687db43ee1832b0ff9dc17
- SSDEEP 3072:Wwl8ZN0L7ba/0p1SZ2rqHddCkaiSGPKeDOjcQlHkzHRse9zsMLU0lvS:tl8/0nba/0GZCqHDCrgP27yxse9z7
- TLSH T10E646C13D3E17C61E5664B319E2EC2E8771EF2108E69377B2258BA2B09B05F2D673711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself