General
- Target setup.exe
- Size 273KB
- Sample230327-by4dpsda4t
- SHA256 229ce43634bea99f1e62a232d6f179fa908b5aa1de8751ba0068b6b89dcdfef6
- MD5 08e274934e788c233d22526ebc5d63f7
- SHA1 78c59cfca9216ba944ab60226142f6806f9db05f
- SHA512 2cef673b28cd8210ea915f3b85bdcd700040adae1daf85cb3e4798d871fec39528c4c2678f234d424ef692ee216b6f3991fcea50a32d7952f5be18090f15a00e
- SSDEEP 3072:ECSTzYUB+aY97WSKwiGMhfqag5kA7GlSudYYYiUKzOEux+SITPqmjkUCJQN0fm2X:guOw3MRqagElS5+7ducxTSmj4Tfz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
sprg
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://hoh0aeghwugh2gie.com/
-
http://hie7doodohpae4na.com/
-
http://aek0aicifaloh1yo.com/
-
http://yic0oosaeiy7ahng.com/
-
http://wa5zu7sekai8xeih.com/
rc4.i32
rc4.i32
Targets
-
- Target setup.exe
- Size 273KB
- SHA256 229ce43634bea99f1e62a232d6f179fa908b5aa1de8751ba0068b6b89dcdfef6
- MD5 08e274934e788c233d22526ebc5d63f7
- SHA1 78c59cfca9216ba944ab60226142f6806f9db05f
- SHA512 2cef673b28cd8210ea915f3b85bdcd700040adae1daf85cb3e4798d871fec39528c4c2678f234d424ef692ee216b6f3991fcea50a32d7952f5be18090f15a00e
- SSDEEP 3072:ECSTzYUB+aY97WSKwiGMhfqag5kA7GlSudYYYiUKzOEux+SITPqmjkUCJQN0fm2X:guOw3MRqagElS5+7ducxTSmj4Tfz
- MD5 SHA1 SHA512 SSDEEP
Score10/10