Overview

overview

10

Static

static

1

setup.exe

windows7-x64

10

setup.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.exe

  • Size

    293KB

  • Sample

    230329-b3h9bsec56

  • MD5

    80de2350870cc82e277f9b19c71e398d

  • SHA1

    cfafa1f2789b494c86d329370e28d7c29773600d

  • SHA256

    668b3ed6f31fce4a65e5bf64bc17a92e1d9b40e8de7627508036cf6e111070bc

  • SHA512

    299d16184a5821405ab66a785a59a558effa5af23596dc5853926763fedd0421a0a012121b5e8790a1a0d309cf1c78ccd3480e218ceb4259a65c0d3a345e8db1

  • SSDEEP

    3072:iEJ/+k9A2BOlMG9qx494GRs1nhCmPQUJo7u9uG77u4Qc78ToWvQfo:/XtBuV9qDHRo2uuu4QcN

Score
10/10
smokeloaderlabbackdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

lab

Extracted

Family

smokeloader

Version

2020

C2

http://host-file-host6.com/

http://host-host-file8.com/
rc4.i32
rc4.i32

Targets

    • Target

      setup.exe

    • Size

      293KB

    • MD5

      80de2350870cc82e277f9b19c71e398d

    • SHA1

      cfafa1f2789b494c86d329370e28d7c29773600d

    • SHA256

      668b3ed6f31fce4a65e5bf64bc17a92e1d9b40e8de7627508036cf6e111070bc

    • SHA512

      299d16184a5821405ab66a785a59a558effa5af23596dc5853926763fedd0421a0a012121b5e8790a1a0d309cf1c78ccd3480e218ceb4259a65c0d3a345e8db1

    • SSDEEP

      3072:iEJ/+k9A2BOlMG9qx494GRs1nhCmPQUJo7u9uG77u4Qc78ToWvQfo:/XtBuV9qDHRo2uuu4QcN

    Score
    10/10
    smokeloaderlabbackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks