Overview

overview

10

Static

static

451020a5a6...57.exe

windows7_x64

10

451020a5a6...57.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    451020a5a64f39d8d434b37e039f4057.exe
  • Size 251KB
  • Sample210218-knlfnegq7x
  • SHA256 c684906ca32b3dd720ecc86aa54ca56a69f8300e112bd3af5f54d569e9e5ba27
  • MD5 SHA1 SHA512
Score
10/10
smokeloaderbackdoortrojan

Malware Config

Extracted

Family

  • smokeloader

Version

  • 2020

C2

  • http://smbproperty.ru/

  • http://gmbshop.ru/

  • http://baksproperty.gov.ug/

  • http://magistralpsw.ru/

  • http://mpmanagertzz.ru/

  • http://powerglasspot.ru/

  • http://autopartswarehouses.ru/

  • http://memoloves.ru/

  • http://alfavanilin.ru/

rc4.i32
rc4.i32

Targets

    • Target
      451020a5a64f39d8d434b37e039f4057.exe
    • Size 251KB
    • SHA256 c684906ca32b3dd720ecc86aa54ca56a69f8300e112bd3af5f54d569e9e5ba27
    • MD5 SHA1 SHA512
    Score
    10/10
    smokeloaderbackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks