General

  • Target

    3e4c2ba23a7ae1d14cd8cc5ece2038ef5085567d1ea2c20dac16a3233db90541

  • Size

    333KB

  • Sample

    220126-t1xcaafgf5

  • MD5

    b25b80e4ba8d5f18c6149b1a6d19c23f

  • SHA1

    a58db136992751701407918c288f2d803259e96c

  • SHA256

    3e4c2ba23a7ae1d14cd8cc5ece2038ef5085567d1ea2c20dac16a3233db90541

  • SHA512

    79dafeb8c37140f53f5645373c2d9f20295e3a8ba92d524a76b68efb5e7c91bb8eb7c9795e345e08755cee5546a506ebe3393172261a3a5dccc54fb200e8978e

Malware Config

Extracted

Family

smokeloader

Version

2020

C2

https://oakland-studio.video/search.php

https://seattle-university.video/search.php

rc4.i32
rc4.i32

Targets

    • Target

      3e4c2ba23a7ae1d14cd8cc5ece2038ef5085567d1ea2c20dac16a3233db90541

    • Size

      333KB

    • MD5

      b25b80e4ba8d5f18c6149b1a6d19c23f

    • SHA1

      a58db136992751701407918c288f2d803259e96c

    • SHA256

      3e4c2ba23a7ae1d14cd8cc5ece2038ef5085567d1ea2c20dac16a3233db90541

    • SHA512

      79dafeb8c37140f53f5645373c2d9f20295e3a8ba92d524a76b68efb5e7c91bb8eb7c9795e345e08755cee5546a506ebe3393172261a3a5dccc54fb200e8978e

MITRE ATT&CK Matrix ATT&CK v6

Execution

Command-Line Interface

1
T1059

Persistence

Modify Existing Service

1
T1031

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

3
T1082

Process Discovery

1
T1057

Collection

Email Collection

1
T1114

Tasks