General

  • Target

    a32cf59e1a7050197f8a9e272d723dc3

  • Size

    250KB

  • Sample

    240225-hx2xtafb9s

  • MD5

    a32cf59e1a7050197f8a9e272d723dc3

  • SHA1

    4e7c3111615892c77ee6570e8a46ebc2192d22b2

  • SHA256

    e837735f16c16e071e4a06e6839c20ff36a3f8239cda42f33dd1defb291f506a

  • SHA512

    89deb5d9b481fcf62f5e8c3e88a9a0eaa7c3fc9f79d2fb885f2a009dc98827c5227a28c789b418a4317a3a0c23702ae9f45f5a567a490e122df5cf8a5abe6f8c

  • SSDEEP

    3072:h+8CpZqmnqZu0XDHcrFge4qYPGRaaQwaE7/FMu5h+bUsOxyYTSSNvTCM:8pxqZvz8B74OaE7/b5hfEYIM

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Extracted

Family

smokeloader

Version

2020

C2

http://aucmoney.com/upload/

http://thegymmum.com/upload/

http://atvcampingtrips.com/upload/

http://kuapakualaman.com/upload/

http://renatazarazua.com/upload/

http://nasufmutlu.com/upload/

rc4.i32
rc4.i32

Targets

    • Target

      a32cf59e1a7050197f8a9e272d723dc3

    • Size

      250KB

    • MD5

      a32cf59e1a7050197f8a9e272d723dc3

    • SHA1

      4e7c3111615892c77ee6570e8a46ebc2192d22b2

    • SHA256

      e837735f16c16e071e4a06e6839c20ff36a3f8239cda42f33dd1defb291f506a

    • SHA512

      89deb5d9b481fcf62f5e8c3e88a9a0eaa7c3fc9f79d2fb885f2a009dc98827c5227a28c789b418a4317a3a0c23702ae9f45f5a567a490e122df5cf8a5abe6f8c

    • SSDEEP

      3072:h+8CpZqmnqZu0XDHcrFge4qYPGRaaQwaE7/FMu5h+bUsOxyYTSSNvTCM:8pxqZvz8B74OaE7/b5hfEYIM

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks