Resubmissions

05/09/2023, 18:45

230905-xd8zcaaf23 10

24/05/2023, 16:27

230524-tylsrsdh3w 10

24/05/2023, 14:44

230524-r344ssch85 10

24/05/2023, 14:29

230524-rty67ach46 10

General

  • Target

    0ab54468721453d7237df27d4dd6383366edb5cc3bfab9a20d48a2416ca2aed8.bin

  • Size

    30KB

  • Sample

    230905-xd8zcaaf23

  • MD5

    f8610249fff7b405c3736886c6f2e80c

  • SHA1

    14c51222c238d26169c19f9e0fe89b47c5d65d5d

  • SHA256

    0ab54468721453d7237df27d4dd6383366edb5cc3bfab9a20d48a2416ca2aed8

  • SHA512

    1f85357f86b3ce03ffb43ae601ebe3a8741b87affcb5dd32939e93441043ab5303ab3051276d9c9d8bfd7acc8bc0aceb127a5111bee60bc5d67d6102e1c3d0e5

  • SSDEEP

    384:uHEOWu0OUQJEWCQ8iHknV2dtMmsxRR+vUQCy/oZ893h8MTQGTjshKi8rpUaJ/aX2:FgJEdQhX7MXR+9/oZu3h1sGTjY6/hu

Malware Config

Extracted

Family

smokeloader

Botnet

0016

Extracted

Family

smokeloader

Version

2022

C2

https://miami-golf-club.com/search.php

https://seattle-fishing-club.com/search.php

rc4.i32
rc4.i32

Targets

    • Target

      0ab54468721453d7237df27d4dd6383366edb5cc3bfab9a20d48a2416ca2aed8.bin

    • Size

      30KB

    • MD5

      f8610249fff7b405c3736886c6f2e80c

    • SHA1

      14c51222c238d26169c19f9e0fe89b47c5d65d5d

    • SHA256

      0ab54468721453d7237df27d4dd6383366edb5cc3bfab9a20d48a2416ca2aed8

    • SHA512

      1f85357f86b3ce03ffb43ae601ebe3a8741b87affcb5dd32939e93441043ab5303ab3051276d9c9d8bfd7acc8bc0aceb127a5111bee60bc5d67d6102e1c3d0e5

    • SSDEEP

      384:uHEOWu0OUQJEWCQ8iHknV2dtMmsxRR+vUQCy/oZ893h8MTQGTjshKi8rpUaJ/aX2:FgJEdQhX7MXR+9/oZu3h1sGTjY6/hu

MITRE ATT&CK Enterprise v15

Tasks