General

  • Target

    556e944d99e3c89efab2db097c561047fcdc0bf5570768fe7a64df9533e887da

  • Size

    165KB

  • Sample

    240325-xm9bgaaf4y

  • MD5

    6adfd23a1deb1cc2116fa8df8bc30579

  • SHA1

    c7629bf9dff967468c12a35b2efbb5032b577712

  • SHA256

    556e944d99e3c89efab2db097c561047fcdc0bf5570768fe7a64df9533e887da

  • SHA512

    1ae18865ac988790acbc45a756ff46e167e618fdce62e2fecde08e1718e51ad3059bc034b2d9563b5912e1eee69199ac708143c3f8e79bda9c7d3a36d779801d

  • SSDEEP

    1536:p8pgjiLhtFGCpDbHeOh94lcvmDbIP8lsOvSFNEaeqXImRJx6p1Xnw7XCunyBryMk:ypgCj4+YXvls1KqXNRv6LwXVyR1pnDA

Malware Config

Extracted

Family

smokeloader

Botnet

tfd5

Extracted

Family

smokeloader

Version

2022

C2

http://trad-einmyus.com/index.php

http://tradein-myus.com/index.php

http://trade-inmyus.com/index.php

rc4.i32
rc4.i32

Targets

    • Target

      556e944d99e3c89efab2db097c561047fcdc0bf5570768fe7a64df9533e887da

    • Size

      165KB

    • MD5

      6adfd23a1deb1cc2116fa8df8bc30579

    • SHA1

      c7629bf9dff967468c12a35b2efbb5032b577712

    • SHA256

      556e944d99e3c89efab2db097c561047fcdc0bf5570768fe7a64df9533e887da

    • SHA512

      1ae18865ac988790acbc45a756ff46e167e618fdce62e2fecde08e1718e51ad3059bc034b2d9563b5912e1eee69199ac708143c3f8e79bda9c7d3a36d779801d

    • SSDEEP

      1536:p8pgjiLhtFGCpDbHeOh94lcvmDbIP8lsOvSFNEaeqXImRJx6p1Xnw7XCunyBryMk:ypgCj4+YXvls1KqXNRv6LwXVyR1pnDA

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks