General

  • Target

    d70f37a40319759a7a3251971c132a23

  • Size

    211KB

  • Sample

    240319-zd59kaff51

  • MD5

    d70f37a40319759a7a3251971c132a23

  • SHA1

    c9e167717e28d88bcaceecf2915c0ca3ccc3bf3f

  • SHA256

    b4ed64d003817fd1f31c6c5dbaba38ac77eeaabc43496dc0d0e3d445836e3c53

  • SHA512

    b50f41739ab1bc79cddf6e6908b92ce94d89420b29f9ae65fab052c5355d133c4bf4c25d4aa20fd55a5c294f10b19610b2c823c21d1ca580d38bc55e453ae405

  • SSDEEP

    3072:JKJx8l0nLNHTcCX5JiR74dhKuTwtrfXjLIqDZYgUvXynvj55rvB:JKnnLNzcCXQ4zatjXjLIqDZJUvX+v

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Extracted

Family

smokeloader

Version

2020

C2

http://perseus007.xyz/upload/

http://lambos1.xyz/upload/

http://cipluks.com/upload/

http://ragnar77.com/upload/

http://aslauk.com/upload/

http://qunersoo.xyz/upload /

http://hostunes.info/upload/

http://leonisdas.xyz/upload/

rc4.i32
rc4.i32

Targets

    • Target

      d70f37a40319759a7a3251971c132a23

    • Size

      211KB

    • MD5

      d70f37a40319759a7a3251971c132a23

    • SHA1

      c9e167717e28d88bcaceecf2915c0ca3ccc3bf3f

    • SHA256

      b4ed64d003817fd1f31c6c5dbaba38ac77eeaabc43496dc0d0e3d445836e3c53

    • SHA512

      b50f41739ab1bc79cddf6e6908b92ce94d89420b29f9ae65fab052c5355d133c4bf4c25d4aa20fd55a5c294f10b19610b2c823c21d1ca580d38bc55e453ae405

    • SSDEEP

      3072:JKJx8l0nLNHTcCX5JiR74dhKuTwtrfXjLIqDZYgUvXynvj55rvB:JKnnLNzcCXQ4zatjXjLIqDZJUvX+v

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks