General

  • Target
    c3d46ec2a43121addb63f888898a6c4c
  • Size 312KB
  • Sample231228-e8nb1schg5
  • SHA256 b84d0e2da061fe4351038a88a6baef71cd5743857eb5358d4396a3b5b3364a51
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub3

Extracted

Family
  • smokeloader

Version
  • 2020

C2
  • http://conceitosseg.com/upload/

  • http://integrasidata.com/upload/

  • http://ozentekstil.com/upload/

  • http://finbelportal.com/upload/

  • http://telanganadigital.com/upload/

rc4.i32
rc4.i32

Targets

    • Target
      c3d46ec2a43121addb63f888898a6c4c
    • Size 312KB
    • SHA256 b84d0e2da061fe4351038a88a6baef71cd5743857eb5358d4396a3b5b3364a51
    • MD5 SHA1 SHA512 SSDEEP
    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks