General
- Target setup.exe
- Size 177KB
- Sample230320-m7zyesdb39
- SHA256 ca43a6c62b35d7d86ff1e340a10a12cdb3b3cd83ba92cd3fd5f9ab905cb47bda
- MD5 11e52498e0b0da938b961e9216d1d16b
- SHA1 26e65846c813fef84c33a9d4484bb6d3ad2e5e9a
- SHA512 a42c897ad63013e67a614ebdb31cf04ba4558da955cf205e495cc5f625bb1929a153a0c6ad39819e272b2c4d5a370b7fbdf2a34b61b343df40b16773c8ff9a85
- SSDEEP 3072:LiAl2RsQMTtzRR2xOPn+7JrpBew+mX/ssfB29:4RBWd+NeKXNfM
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 177KB
- SHA256 ca43a6c62b35d7d86ff1e340a10a12cdb3b3cd83ba92cd3fd5f9ab905cb47bda
- MD5 11e52498e0b0da938b961e9216d1d16b
- SHA1 26e65846c813fef84c33a9d4484bb6d3ad2e5e9a
- SHA512 a42c897ad63013e67a614ebdb31cf04ba4558da955cf205e495cc5f625bb1929a153a0c6ad39819e272b2c4d5a370b7fbdf2a34b61b343df40b16773c8ff9a85
- SSDEEP 3072:LiAl2RsQMTtzRR2xOPn+7JrpBew+mX/ssfB29:4RBWd+NeKXNfM
- MD5 SHA1 SHA512 SSDEEP
Score10/10