Overview

overview

10

Static

static

8

b88c09a6fb...bf.exe

windows7_x64

10

b88c09a6fb...bf.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    b88c09a6fb1c8064cf0db0b85a51fdbf.exe
  • Size 210KB
  • Sample210111-vbtm7k85bj
  • SHA256 d4e87e3eb3e3a5e08db5a708bd95fedac322088446c87ba37f0aeca529a928cc
  • MD5 SHA1 SHA512
Score
10/10
smokeloaderbackdoortrojanupx

Malware Config

Extracted

Family

  • smokeloader

Version

  • 2020

C2

  • http://mpmanagertzz.ru/

  • http://gmbshop.ru/

  • http://umnsystms.ug/

  • http://facepropertyzone.com/

  • http://ovenlumansera.ru/

  • http://vinimaxcopy.ru/

  • http://septembexisecel.ru/

  • http://wevivomboss.com/

  • http://baksproperty.gov.ug/

  • http://mossvivoweb.ru/

rc4.i32
rc4.i32

Targets

    • Target
      b88c09a6fb1c8064cf0db0b85a51fdbf.exe
    • Size 210KB
    • SHA256 d4e87e3eb3e3a5e08db5a708bd95fedac322088446c87ba37f0aeca529a928cc
    • MD5 SHA1 SHA512
    Score
    10/10
    smokeloaderbackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks