General
- Target setup.exe
- Size 246KB
- Sample230325-c2fbqaaf99
- SHA256 ebaf6abc3a0081c2e84e2c344d5dd99d4f4311e579685941e675c075cb87c484
- MD5 d027b058d588f568019aad5cb6ab72c4
- SHA1 b5327f95d13d3d04120929f41102d1971d77c99f
- SHA512 ca1099912a1e7ea079cd931650a106da665ef802b3d69ac0d950da45a9f3908a0bbea68d4de6d3b326d1dc9b894d2c4c97cd163f73ee2e32e1ff4636f23835d9
- SSDEEP 3072:0vX2I+zBvXZKed3ggT5snfCDQDwpFCmCYtSpRtR6BSB0hMlwY+A6h2yxx95WNObN:/I2zErzvHOhfY+PEa95j
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 246KB
- SHA256 ebaf6abc3a0081c2e84e2c344d5dd99d4f4311e579685941e675c075cb87c484
- MD5 d027b058d588f568019aad5cb6ab72c4
- SHA1 b5327f95d13d3d04120929f41102d1971d77c99f
- SHA512 ca1099912a1e7ea079cd931650a106da665ef802b3d69ac0d950da45a9f3908a0bbea68d4de6d3b326d1dc9b894d2c4c97cd163f73ee2e32e1ff4636f23835d9
- SSDEEP 3072:0vX2I+zBvXZKed3ggT5snfCDQDwpFCmCYtSpRtR6BSB0hMlwY+A6h2yxx95WNObN:/I2zErzvHOhfY+PEa95j
- MD5 SHA1 SHA512 SSDEEP
Score10/10