Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.zip

  • Size

    156KB

  • Sample

    230327-hrxqxaeb9y

  • MD5

    e332603f908c72cff39a81db5a409694

  • SHA1

    b7c19049e2cd08e26636826b671476fb72b0e698

  • SHA256

    2b48a940abdbb712e70e2da9c2b309a30bd7e8446fb2bc7e913155da7606aa3f

  • SHA512

    dda866a3e777c2c0078bb9309aa9cb2ea9da6c2a8a67e27874eb516cde964375d0e162538d247d4288d4803ff55bf4311b0bb00102cccdd67e49c3a1e42d8f3e

  • SSDEEP

    3072:cU8xXqbMyAheGclNC2lSPjMmqkH2zMbJqWHBYH7F4CgwkIyWXuDni6:6xXhy6eGcvDLrkWzkHB87F49wkLp

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://potunulit.org/

http://hutnilior.net/

http://bulimu55t.net/

http://soryytlic4.net/

http://novanosa5org.org/

http://nuljjjnuli.org/

http://tolilolihul.net/

http://somatoka51hub.net/

http://hujukui3.net/

http://bukubuka1.net/

http://golilopaster.org/

http://newzelannd66.org/

http://otriluyttn.org/
rc4.i32
rc4.i32

Targets

    • Target

      file

    • Size

      269KB

    • MD5

      26d85c2bdc983c43452401545f3c6007

    • SHA1

      e18a2a223b91f426b5dab23b13970264d1da6ebc

    • SHA256

      c8313943995590c444dac429919bc562c8f81c7d81c898fbb9bd7822dce889f4

    • SHA512

      d652d2c4ab97507e0b61b37dc069b024a531b56e80f95a449d201ba6b0a1b6baecc33162be4f4a4571054295154c2c4c0a27f6831ac5dd37f0d27e3795fde3e5

    • SSDEEP

      3072:Fm6fmyQA+BF8tlkC42EVOkAz+t/lB2SpYeEvyqbxDFoio56WmxeQZn78F:zQLK42EskAhS+7fyZmB

    Score
    10/10
    smokeloaderbackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks