General

  • Target

    b11b550fccddee0f9652cb34c12f91c0

  • Size

    180KB

  • Sample

    240304-d1nr5she37

  • MD5

    b11b550fccddee0f9652cb34c12f91c0

  • SHA1

    0dd1703f8971981781f07b931547a07ea2d3a420

  • SHA256

    fd58afa96d56df9d4bb20955601fc4b7e379b9964eccf31cb1904252f709dbc7

  • SHA512

    612e823b664f77b50e751ff1e2a4964fd110685583ff51af3e1875fc74a228a47539e0ddbc584c3558c88eab2bc32807e8cd533878bcbc2519b1554e6abe9496

  • SSDEEP

    3072:nLKj98VzeJcm/ujPBN4SpORcoWJfPsV98Q5NGSfPH+:nLPUdOJzloWdPsViQGSHe

Malware Config

Extracted

Family

smokeloader

Botnet

0708

Extracted

Family

smokeloader

Version

2020

C2

http://readinglistforjuly1.xyz/

http://readinglistforjuly2.xyz/

http://readinglistforjuly3.xyz/

http://readinglistforjuly4.xyz/

http://readinglistforjuly5.xyz/

http://readinglistforjuly6.xyz/

http://readinglistforjuly7.xyz/

http://readinglistforjuly8.xyz/

http://readinglistforjuly9.xyz/

http://readinglistforjuly10.xyz/

http://readinglistforjuly1.site/

http://readinglistforjuly2.site/

http://readinglistforjuly3.site/

http://readinglistforjuly4.site/

http://readinglistforjuly5.site/

http://readinglistforjuly6.site/

http://readinglistforjuly7.site/

http://readinglistforjuly8.site/

http://readinglistforjuly9.site/

http://readinglistforjuly10.site/

rc4.i32
rc4.i32

Targets

    • Target

      b11b550fccddee0f9652cb34c12f91c0

    • Size

      180KB

    • MD5

      b11b550fccddee0f9652cb34c12f91c0

    • SHA1

      0dd1703f8971981781f07b931547a07ea2d3a420

    • SHA256

      fd58afa96d56df9d4bb20955601fc4b7e379b9964eccf31cb1904252f709dbc7

    • SHA512

      612e823b664f77b50e751ff1e2a4964fd110685583ff51af3e1875fc74a228a47539e0ddbc584c3558c88eab2bc32807e8cd533878bcbc2519b1554e6abe9496

    • SSDEEP

      3072:nLKj98VzeJcm/ujPBN4SpORcoWJfPsV98Q5NGSfPH+:nLPUdOJzloWdPsViQGSHe

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks