General

  • Target

    d52f0f1ac98c8da148663f1548533fe71765b190ea82cb4f0b818084deb0e1aa

  • Size

    352KB

  • Sample

    220128-msd3eacaa3

  • MD5

    31b9d8d4a63e8bf4ea6212b93a18713d

  • SHA1

    aea8d712428d1df2a4ba6b9b2e0acec371a98730

  • SHA256

    d52f0f1ac98c8da148663f1548533fe71765b190ea82cb4f0b818084deb0e1aa

  • SHA512

    e0136e48a4e0a5ef48265ad676efa1c727f7a2aec88befd5d888bb86ff90b68b9905d8eab4ee9b818ea87ae9256dea240b950a02617baefe2429b13f5d307230

Malware Config

Extracted

Family

smokeloader

Version

2020

C2

https://oakland-studio.video/search.php

https://seattle-university.video/search.php

rc4.i32
rc4.i32

Targets

    • Target

      d52f0f1ac98c8da148663f1548533fe71765b190ea82cb4f0b818084deb0e1aa

    • Size

      352KB

    • MD5

      31b9d8d4a63e8bf4ea6212b93a18713d

    • SHA1

      aea8d712428d1df2a4ba6b9b2e0acec371a98730

    • SHA256

      d52f0f1ac98c8da148663f1548533fe71765b190ea82cb4f0b818084deb0e1aa

    • SHA512

      e0136e48a4e0a5ef48265ad676efa1c727f7a2aec88befd5d888bb86ff90b68b9905d8eab4ee9b818ea87ae9256dea240b950a02617baefe2429b13f5d307230

MITRE ATT&CK Matrix ATT&CK v6

Execution

Command-Line Interface

1
T1059

Persistence

Modify Existing Service

1
T1031

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

3
T1082

Process Discovery

1
T1057

Collection

Email Collection

1
T1114

Tasks