Overview

overview

10

Static

static

3

2a557bd351...18.exe

windows7-x64

10

2a557bd351...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a557bd351d84f14848ac420bd7b30cd_JaffaCakes118

  • Size

    4.6MB

  • Sample

    240329-xsjm1aff3t

  • MD5

    2a557bd351d84f14848ac420bd7b30cd

  • SHA1

    e72f5561b02a6072c087ce20b10ac65b5f686b70

  • SHA256

    cc8a57c09d862989b836cb500174db44118db4f0ef14d4b102b52f5949d172be

  • SHA512

    e479f7be3e4dce813d478dcdbefe17e28a4fe87f5449d4a458a2a683ec8d8f97efb3be3e94c7a4fa91f150b39b28e2c9cdcff9090b3a864c7bb8d8f9dec4e79c

  • SSDEEP

    98304:RLWA+M+SdtXTNO1zkcFRgUENaH5+sVDWIq05yJzPVKyS2xz:iMlXROh56cH0cDWI1gTS2

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Extracted

Family

smokeloader

Version

2020

C2

http://gfdjgdfjgdhfbg.space/

http://gfhjdsghdfjg23.space/

http://gdfjgdfh4543nf.space/

http://fgdjgsdfghj4fds.space/

http://fgdgdjfgfdgdf.space/

http://fsdhjfsdhfsd.space/

http://fgdsjghdfghjdfhgd.space/

http://ryuesrseyth3.space/

http://fdsjkuhreyu4.space/

http://fdgjdfgehr4.space/

http://fgdgjhdfgdfjgd.space/
rc4.i32
rc4.i32

Targets

    • Target

      2a557bd351d84f14848ac420bd7b30cd_JaffaCakes118

    • Size

      4.6MB

    • MD5

      2a557bd351d84f14848ac420bd7b30cd

    • SHA1

      e72f5561b02a6072c087ce20b10ac65b5f686b70

    • SHA256

      cc8a57c09d862989b836cb500174db44118db4f0ef14d4b102b52f5949d172be

    • SHA512

      e479f7be3e4dce813d478dcdbefe17e28a4fe87f5449d4a458a2a683ec8d8f97efb3be3e94c7a4fa91f150b39b28e2c9cdcff9090b3a864c7bb8d8f9dec4e79c

    • SSDEEP

      98304:RLWA+M+SdtXTNO1zkcFRgUENaH5+sVDWIq05yJzPVKyS2xz:iMlXROh56cH0cDWI1gTS2

    Score
    10/10
    smokeloaderbackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks