Overview

overview

10

Static

static

15d0c452_b...is.exe

windows7_x64

10

15d0c452_b...is.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15d0c452_by_Libranalysis

  • Size

    169KB

  • Sample

    210503-gf4f2flefj

  • MD5

    15d0c452ebee4621530ad0c834439a96

  • SHA1

    7d8d83d21cc4c85382347545030eb7da5b66db6c

  • SHA256

    5f31050b511cf181abfa18b04cdc3a4152afc18c34b4ffc1087496144ac56a7c

  • SHA512

    39222091b9a87dcbc92ae477af2064838c7fde01f372145c06acc5f4b90d068db537b68d36e89e5068bdc0d2a4eee3700386adde5d2f97747c53ac62db436fdc

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Extracted

Family

smokeloader

Version

2020

C2

http://smbproperty.ru/

http://gmbshop.ru/

http://baksproperty.gov.ug/

http://magistralpsw.ru/

http://mpmanagertzz.ru/

http://powerglasspot.ru/

http://autopartswarehouses.ru/

http://memoloves.ru/

http://alfavanilin.ru/
rc4.i32
rc4.i32

Targets

    • Target

      15d0c452_by_Libranalysis

    • Size

      169KB

    • MD5

      15d0c452ebee4621530ad0c834439a96

    • SHA1

      7d8d83d21cc4c85382347545030eb7da5b66db6c

    • SHA256

      5f31050b511cf181abfa18b04cdc3a4152afc18c34b4ffc1087496144ac56a7c

    • SHA512

      39222091b9a87dcbc92ae477af2064838c7fde01f372145c06acc5f4b90d068db537b68d36e89e5068bdc0d2a4eee3700386adde5d2f97747c53ac62db436fdc

    Score
    10/10
    smokeloaderbackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks