General

  • Target

    12b4cacc3d87427babdf429c12e520d3_JaffaCakes118

  • Size

    172KB

  • Sample

    240328-3far8abe7v

  • MD5

    12b4cacc3d87427babdf429c12e520d3

  • SHA1

    23ff25104405e34f06c0dae95acab8c3366886a1

  • SHA256

    1e5296130fabed3cedc5762615f59bc3c803698b3c68ffdb1f69dccf31994c60

  • SHA512

    102fc202ebdf2e6af4588e4d5a64d715c89bdc7a48f5aa2c7a1520fb07eac929ae7d6702e57b4d270908c311d60c73644400b999e07e7c137fdc61e7adcfa039

  • SSDEEP

    3072:HtiJ5o2Bf056wmjzYSBGYnNgDXsoS9D98aShyuyxOQ1MplUFKe3E:HsjHBfQ6w7SBGYn68Vx98aCUeXUFKyE

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Extracted

Family

smokeloader

Version

2020

C2

http://gmpeople.com/upload/

http://mile48.com/upload/

http://lecanardstsornin.com/upload/

http://m3600.com/upload/

http://camasirx.com/upload/

rc4.i32
rc4.i32

Targets

    • Target

      12b4cacc3d87427babdf429c12e520d3_JaffaCakes118

    • Size

      172KB

    • MD5

      12b4cacc3d87427babdf429c12e520d3

    • SHA1

      23ff25104405e34f06c0dae95acab8c3366886a1

    • SHA256

      1e5296130fabed3cedc5762615f59bc3c803698b3c68ffdb1f69dccf31994c60

    • SHA512

      102fc202ebdf2e6af4588e4d5a64d715c89bdc7a48f5aa2c7a1520fb07eac929ae7d6702e57b4d270908c311d60c73644400b999e07e7c137fdc61e7adcfa039

    • SSDEEP

      3072:HtiJ5o2Bf056wmjzYSBGYnNgDXsoS9D98aShyuyxOQ1MplUFKe3E:HsjHBfQ6w7SBGYn68Vx98aCUeXUFKyE

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks