General

  • Target

    78a9df3c3e0e7395f2ac5cf112331793f00311b251bf435bc3c44869e3705670

  • Size

    357KB

  • Sample

    220128-kvtvjaagc6

  • MD5

    0e84578bea1fb3792a6a67947802e403

  • SHA1

    2ab191f4b4936b1c54573b715a8740fbb8d0afca

  • SHA256

    78a9df3c3e0e7395f2ac5cf112331793f00311b251bf435bc3c44869e3705670

  • SHA512

    4c9ea6e99cfdbdc54f307d26dec5a63a6784466c8e387ab4537aff788345851824264b6d2e2df7e43342696cac78f5b4b9bb3c2e0a460c9cdaf043b97e8bab46

Malware Config

Extracted

Family

smokeloader

Version

2020

C2

https://oakland-studio.video/search.php

https://seattle-university.video/search.php

rc4.i32
rc4.i32

Targets

    • Target

      78a9df3c3e0e7395f2ac5cf112331793f00311b251bf435bc3c44869e3705670

    • Size

      357KB

    • MD5

      0e84578bea1fb3792a6a67947802e403

    • SHA1

      2ab191f4b4936b1c54573b715a8740fbb8d0afca

    • SHA256

      78a9df3c3e0e7395f2ac5cf112331793f00311b251bf435bc3c44869e3705670

    • SHA512

      4c9ea6e99cfdbdc54f307d26dec5a63a6784466c8e387ab4537aff788345851824264b6d2e2df7e43342696cac78f5b4b9bb3c2e0a460c9cdaf043b97e8bab46

MITRE ATT&CK Matrix ATT&CK v6

Execution

Command-Line Interface

1
T1059

Persistence

Modify Existing Service

1
T1031

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

3
T1082

Process Discovery

1
T1057

Collection

Email Collection

1
T1114

Tasks