General
- Target setup.exe
- Size 177KB
- Sample230320-m85kasfb4v
- SHA256 6d79d9f7e72e86565717a874fd1abbe9b3bd656911881956fc9dbca75106eb46
- MD5 8ef9b748237ad91351a0aa0765a19bb5
- SHA1 607ba9cf4a5b1a382837534f82836287a790d00f
- SHA512 cd893a3d2ca8c282afe228fa0ddd6d96286e0f329ad784fd1a071c3ddc4ddde23e1b502710d6e337011b87f20f8b1a9ef8f6d34232eba9dbd6ed38cc15ae67b1
- SSDEEP 3072:EH2G0P4Mf51zfdA8JM//i+aeuExdRpGhk:g0PVfdK/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 177KB
- SHA256 6d79d9f7e72e86565717a874fd1abbe9b3bd656911881956fc9dbca75106eb46
- MD5 8ef9b748237ad91351a0aa0765a19bb5
- SHA1 607ba9cf4a5b1a382837534f82836287a790d00f
- SHA512 cd893a3d2ca8c282afe228fa0ddd6d96286e0f329ad784fd1a071c3ddc4ddde23e1b502710d6e337011b87f20f8b1a9ef8f6d34232eba9dbd6ed38cc15ae67b1
- SSDEEP 3072:EH2G0P4Mf51zfdA8JM//i+aeuExdRpGhk:g0PVfdK/
- MD5 SHA1 SHA512 SSDEEP
Score10/10Executes dropped EXE