General
- Target jaffacakes118_f884374c10786b41aa629303a84dc26b7244c2ee89c5070603e7ee93b7eefb47.bin
- Size 334KB
- Sample260922-pc4n8ssxas
- SHA256 f884374c10786b41aa629303a84dc26b7244c2ee89c5070603e7ee93b7eefb47
- MD5 bf761b19186ad1b17544de62c4625283
- SHA1 d3a13aa738b53714a3272c48e184f31da594cdeb
- SHA512 6845c719da447f4c3d18d8a3475600f8d97141a36aa60b57c8a1dd6c3bdcc5b494f9e28b4e07b32933276b8b3bcfb2191cfde52dca8ec1f59aa5fab9d078a6d1
- SSDEEP 6144:YajjbmbNdU92ynEf4CmOJEzp3938nfrESrK:Y+6BdU92y0ZmBd9ufru
- TLSH T1AA742A1393E17D51E9264B7A9E2EC2FC761EF6508E5E7B6E22189A2F04B01B3C173711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_f884374c10786b41aa629303a84dc26b7244c2ee89c5070603e7ee93b7eefb47.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_f884374c10786b41aa629303a84dc26b7244c2ee89c5070603e7ee93b7eefb47.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://gudintas.at/tmp/
-
http://pik96.ru/tmp/
-
http://rosatiauto.com/tmp/
-
http://kingpirate.ru/tmp/
rc4.i32
rc4.i32
Targets
-
- Target jaffacakes118_f884374c10786b41aa629303a84dc26b7244c2ee89c5070603e7ee93b7eefb47.bin
- Size 334KB
- SHA256 f884374c10786b41aa629303a84dc26b7244c2ee89c5070603e7ee93b7eefb47
- MD5 bf761b19186ad1b17544de62c4625283
- SHA1 d3a13aa738b53714a3272c48e184f31da594cdeb
- SHA512 6845c719da447f4c3d18d8a3475600f8d97141a36aa60b57c8a1dd6c3bdcc5b494f9e28b4e07b32933276b8b3bcfb2191cfde52dca8ec1f59aa5fab9d078a6d1
- SSDEEP 6144:YajjbmbNdU92ynEf4CmOJEzp3938nfrESrK:Y+6BdU92y0ZmBd9ufru
- TLSH T1AA742A1393E17D51E9264B7A9E2EC2FC761EF6508E5E7B6E22189A2F04B01B3C173711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself