General
- Target jaffacakes118_401be3db8e7f28eb21e16e06d61bab241ee61f3250a400b55b41fe27d9b00c22.bin
- Size 229KB
- Sample260922-qat8fsfa38
- SHA256 401be3db8e7f28eb21e16e06d61bab241ee61f3250a400b55b41fe27d9b00c22
- MD5 0776e72e271a17a9714facda22ff2b8c
- SHA1 40bedf3964c2aed09a8e19641e91529aa6e5310d
- SHA512 790ec8397e97158635b6bb89b2675fdefecf48bea75c808d101f6c14933f3fd0a9e12b895e6ef3f1167fc168ad4d9a55ee30543c586ac323a140903ce125d590
- SSDEEP 6144:MhT+eXDr8FNm+5zT5ETRB7cusmV47w+7+X:k9XDr8fm05IB7sE47w+7+X
- TLSH T1273423BA4D1A436FCC007E87A0EB4B3DFF54B80417A2B0BD6958AD7C05958E651BE0A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
57057862192b71d7a2c5d1ef78dd5b462622932c96af2e9bf30a20381153c816.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
57057862192b71d7a2c5d1ef78dd5b462622932c96af2e9bf30a20381153c816.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub2
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://vatra.at/tmp/
-
http://spbdg.ru/tmp/
-
http://skinndia.com/tmp/
-
http://cracker.biz/tmp/
-
http://piratia-life.ru/tmp/
-
http://piratia.su/tmp/
rc4.i32
rc4.i32
Targets
-
- Target 57057862192b71d7a2c5d1ef78dd5b462622932c96af2e9bf30a20381153c816.exe
- Size 366KB
- SHA256 57057862192b71d7a2c5d1ef78dd5b462622932c96af2e9bf30a20381153c816
- MD5 0f27175cd763712adff0bae60a490787
- SHA1 91ba40b59fb42ab3fea884a38c31673fd2b0c5c5
- SHA512 6e68cecc4cb0e7d46da6ea4f73dc6a26bd87cf2bbe751f28fed0d73089222289399f2ef87a021a1af47efa46c16bae433e29146ac6996dc8f3612051d9eaba60
- SSDEEP 6144:k9mLGW6qGZrZNm+DVUQM0J3KDycAyjFvJEMbx14rb:emR6VVDmuUgJaDPAyxfV14
- TLSH T18F84BE1173D5BDA1D84125758C2BFBE86A2DBD328EA076333315767F1ABC2A0B232175
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself