Overview

overview

10

Static

static

fd164fc1df...2a.exe

windows7_x64

10

fd164fc1df...2a.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd164fc1dfed3445d8cdb9e72f08172a

  • Size

    279KB

  • Sample

    211118-fxkmesbfgj

  • MD5

    fd164fc1dfed3445d8cdb9e72f08172a

  • SHA1

    41065b87823ea86e278fbecc3cc486637720825d

  • SHA256

    7a71c46f5f6f27776603ee0de69e6eb83364942d8af0c16f5b54c14d7faba136

  • SHA512

    861144a25e10e3823ddbac94b90d42e29a8a80186e758deaa9a57ff2874fa615d9e800bc0f961920c78793c5656fa13fe42552be6cfc9b31155ccaeecde21b1f

Score
10/10
raccoonsmokeloader14b265e74e2847e8408db7ca21fe6fe2e9ab5767backdoorcollectionstealertrojan

Malware Config

Extracted

Family

smokeloader

Version

2020

C2

http://rsuehfidvdkfvk.top/

rc4.i32
rc4.i32

Extracted

Family

raccoon

Version

1.8.3-hotfix

Botnet

14b265e74e2847e8408db7ca21fe6fe2e9ab5767

Attributes
  • url4cnc

    http://91.219.236.162/masterdanteloma

    http://185.163.47.176/masterdanteloma

    http://193.38.54.238/masterdanteloma

    http://74.119.192.122/masterdanteloma

    http://91.219.236.240/masterdanteloma

    https://t.me/masterdanteloma

rc4.plain
rc4.plain

Targets

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks