11ac8b313e17391ba1c40d40d400b477bbc4bd48fc72967e308899319c9ec7bf

Sharing

Copy URL Twitter E-mail

General

Target
BotNets.zip
Size 276.3MB
Sample240404-vkchlsdg73
SHA256 11ac8b313e17391ba1c40d40d400b477bbc4bd48fc72967e308899319c9ec7bf
MD5 9e03dc170091d7a5be88dadb11715482
SHA1 b1d6789bac4530f97311ed0f97c3da4ce9363a48
SHA512 11a1dd25ed551a3038c12c9ee6bdbb49a983b0d637be9e1ce77b4c6ee64de16391b88e831375cf482d29211b7e5a34a12447d03d3778fe49b900e6d7ccfe8e17
SSDEEP 6291456:HA5O9d3aOwWFxVFCIAMOsPUD8pMmbAWl/nlV1aR3ITEtiR7l2:HA8PZwWF0IAAZnbAWpsR3IzRx2
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

link pdf upx

Malware Config

Targets

- Target
  BotNets/SmokeBot/Builder.exe
- Size 150KB
- SHA256 fc7a97e7bf86c69a409c1211dddc4e97cbc109ffd4a8d1a13ff3b9aab9b9d0f9
- MD5 a9fbbab787268d6b6b7591c731994cde
- SHA1 eff857cce9a252470b80b63710226058bc9d2c9c
- SHA512 d6ce3a60c0b3b2df9d07adb68e2578f7fabb97a7ccc370cd0871fe23d299f6e7251869d380dbd2561d35972131995a41dacacfdeba4c2ec3d0c9da1a21161ccc
- SSDEEP 3072:roOzSNRh6+Cs7nKCageYQ+f5keXt3RI7VlFtYtrdi9ddDojSLR205Pbt:cA+57KCaget+f5ky3QVlwtrdir9oM/x
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  BotNets/SmokeBot/SmokeBuilder.exe
- Size 152KB
- SHA256 874b8ed1d4910e7ecd59d6f72ad17b8df8e7248143ef606cf0761a0c3767447d
- MD5 915d36d8249df2018b0b0dfe250b38fd
- SHA1 6d8afbc5c558b7922dd15dbd463dfef0d8b727f8
- SHA512 94badd09349cb84ac20050565be47efc2944d44cc232733d21344d6eb2747a3a19e480262a479f87dc7f37758dc2b0f29f72a384a5639c688e80d54d4e4260aa
- SSDEEP 1536:m6vv5NtQkDkXROA8SHpHlzLEygj9wlvnqBTOIJCO:myUXR5DPk9wlvaOZO
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  BotNets/SmokeBot/admin/data/index.html
- Size 91B
- SHA256 da1f9d3c8cdee13dda98734237fabc708a983ef5e70dc9a6312bab87ff99aa61
- MD5 3c79360ae83ecfdf909a16cbe606b951
- SHA1 7dac957f1b426d257d11c8ffad85c4ba2faec511
- SHA512 31a55456f48c3fb787f0f4410004777e3468fc5cde4c2c2e2d4159e2a1b68e6c03fef5a74e70e106d93e8b737508c34858ba5e0b5cb39d7a5dd234d06f455c55
- MD5 SHA1 SHA512
Score

1^/10
behavioral5 behavioral6
- Target
  BotNets/SmokeBot/admin/exe/index.html
- Size 91B
- SHA256 da1f9d3c8cdee13dda98734237fabc708a983ef5e70dc9a6312bab87ff99aa61
- MD5 3c79360ae83ecfdf909a16cbe606b951
- SHA1 7dac957f1b426d257d11c8ffad85c4ba2faec511
- SHA512 31a55456f48c3fb787f0f4410004777e3468fc5cde4c2c2e2d4159e2a1b68e6c03fef5a74e70e106d93e8b737508c34858ba5e0b5cb39d7a5dd234d06f455c55
- MD5 SHA1 SHA512
Score

1^/10
behavioral7 behavioral8
- Target
  BotNets/SmokeBot/admin/imgs/flags/index.html
- Size 91B
- SHA256 da1f9d3c8cdee13dda98734237fabc708a983ef5e70dc9a6312bab87ff99aa61
- MD5 3c79360ae83ecfdf909a16cbe606b951
- SHA1 7dac957f1b426d257d11c8ffad85c4ba2faec511
- SHA512 31a55456f48c3fb787f0f4410004777e3468fc5cde4c2c2e2d4159e2a1b68e6c03fef5a74e70e106d93e8b737508c34858ba5e0b5cb39d7a5dd234d06f455c55
- MD5 SHA1 SHA512
Score

1^/10
behavioral10 behavioral9
- Target
  BotNets/SmokeBot/admin/imgs/os/index.html
- Size 91B
- SHA256 da1f9d3c8cdee13dda98734237fabc708a983ef5e70dc9a6312bab87ff99aa61
- MD5 3c79360ae83ecfdf909a16cbe606b951
- SHA1 7dac957f1b426d257d11c8ffad85c4ba2faec511
- SHA512 31a55456f48c3fb787f0f4410004777e3468fc5cde4c2c2e2d4159e2a1b68e6c03fef5a74e70e106d93e8b737508c34858ba5e0b5cb39d7a5dd234d06f455c55
- MD5 SHA1 SHA512
Score

1^/10
behavioral11 behavioral12
- Target
  BotNets/SmokeBot/admin/inc/geoip.php
- Size 22KB
- SHA256 48e65141930b587b831b8c9e114c26c0097535cada660a60630bfcf274f0b1ee
- MD5 d4022de1bcbd5dc96b4e8610d3fd123b
- SHA1 1f7abd2eceab53619773cfde93ee55b368c91bab
- SHA512 947efbf5cad3379e15133fbdf257c8d48666116f72273f0337a428f46f249dab6274e5d94fd342728b2100006ffcad75d76b0d96ea97b2b7bae9ec527bb9927f
- SSDEEP 384:25DZLdLzwxhOdq+JGGP+cViZQltm9It9TEG0JjZEvPUn1ZKEx8jZYakjgB9boPFS:25DZdLzwxhfoP+c6okd8WAr
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  BotNets/SmokeBot/admin/inc/index.html
- Size 91B
- SHA256 da1f9d3c8cdee13dda98734237fabc708a983ef5e70dc9a6312bab87ff99aa61
- MD5 3c79360ae83ecfdf909a16cbe606b951
- SHA1 7dac957f1b426d257d11c8ffad85c4ba2faec511
- SHA512 31a55456f48c3fb787f0f4410004777e3468fc5cde4c2c2e2d4159e2a1b68e6c03fef5a74e70e106d93e8b737508c34858ba5e0b5cb39d7a5dd234d06f455c55
- MD5 SHA1 SHA512
Score

1^/10
behavioral15 behavioral16
- Target
  BotNets/SmokeBot/admin/index.html
- Size 91B
- SHA256 da1f9d3c8cdee13dda98734237fabc708a983ef5e70dc9a6312bab87ff99aa61
- MD5 3c79360ae83ecfdf909a16cbe606b951
- SHA1 7dac957f1b426d257d11c8ffad85c4ba2faec511
- SHA512 31a55456f48c3fb787f0f4410004777e3468fc5cde4c2c2e2d4159e2a1b68e6c03fef5a74e70e106d93e8b737508c34858ba5e0b5cb39d7a5dd234d06f455c55
- MD5 SHA1 SHA512
Score

1^/10
behavioral17 behavioral18
- Target
  BotNets/SmokeBot/admin/mods/index.html
- Size 91B
- SHA256 da1f9d3c8cdee13dda98734237fabc708a983ef5e70dc9a6312bab87ff99aa61
- MD5 3c79360ae83ecfdf909a16cbe606b951
- SHA1 7dac957f1b426d257d11c8ffad85c4ba2faec511
- SHA512 31a55456f48c3fb787f0f4410004777e3468fc5cde4c2c2e2d4159e2a1b68e6c03fef5a74e70e106d93e8b737508c34858ba5e0b5cb39d7a5dd234d06f455c55
- MD5 SHA1 SHA512
Score

1^/10
behavioral19 behavioral20
- Target
  BotNets/SmokeBot/admin/shell/index.html
- Size 91B
- SHA256 da1f9d3c8cdee13dda98734237fabc708a983ef5e70dc9a6312bab87ff99aa61
- MD5 3c79360ae83ecfdf909a16cbe606b951
- SHA1 7dac957f1b426d257d11c8ffad85c4ba2faec511
- SHA512 31a55456f48c3fb787f0f4410004777e3468fc5cde4c2c2e2d4159e2a1b68e6c03fef5a74e70e106d93e8b737508c34858ba5e0b5cb39d7a5dd234d06f455c55
- MD5 SHA1 SHA512
Score

1^/10
behavioral21 behavioral22
- Target
  BotNets/SmokeBot/tools/Parser.exe
- Size 159KB
- SHA256 f646ae693b297d12a62bbc130ceb536539d42e6fae4bd835de3e594e0fa0b07c
- MD5 139ed6ade0b105e35208e5e02fda8a12
- SHA1 fb078d770769609aef61e4cb4c273356d380def9
- SHA512 7f4f9e0da81ebd68c4f82dc94c6a3f53e5c30481a47bbb5b44cd0bca48b10bcc0234bfba830a0d8a32b1caf1bfd7a0946516113085c6563ad15f0ea4a26d92b1
- SSDEEP 3072:QUvOPctYN71FgRn6hQbxZQ26fWZ+NTiHTtlLG4gKqN3doaz+fdG:QEOPc2NJFgRnmQbxZPwrtizXhgBNNo2O
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral23 behavioral24
- Target
  BotNets/The Botnet Guide.pdf
- Size 1.0MB
- SHA256 00c47cd5a6a69b9b0f659cc1f766c77fdef61f9fa632695a14060ac3471819d4
- MD5 bb70cada86476c95d30cf2fa95f8f3f2
- SHA1 0cde535a11cf81b2e903941e6793f9d33c48adaf
- SHA512 0623376724a7e55decff7984b43e31d34cf3d1b6fb4add8ad81fec2d9b9c7ae3f9aff25597992a6d7d6643e21e4accf3e98cd15bee09bc31b730d7866c610718
- SSDEEP 24576:mSCi2cg+M77kRMKI63upKAuLZ2VjHSfMxlJSN+TLdl:JMcXN3ceLiRxnS8Tb
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  BotNets/WarBot/(HTTP Botnet) Warbot Botnet Tutorial.url
- Size 140B
- SHA256 930cf43badc59d3bf4afa9cdb66c00e1e8490407442747a16fa1db280ca87e64
- MD5 44f672e30a0b21b02416442ea677054d
- SHA1 21b1a5a5a60643015e4b17641a824229a6de58cc
- SHA512 1244338c62e97a0d781f9c8f961208406bcdc28e8cc188372eb03c0356e624b83056b4ef58dd0cbc020fcf685959c7d04972cb9b370e861f1f7350a7a0dac4a3
- MD5 SHA1 SHA512
Score

1^/10
behavioral27 behavioral28
- Target
  BotNets/WarBot/WarBot/Builder & Bot/Builder & Bot/RedTube.exe
- Size 56KB
- SHA256 a6859895c2d09752d0de2aef8701e1f0d7dbfb5f2382349fabc0e8356f090a00
- MD5 da1aba4a05e4045f3cfe1bdd26fafe85
- SHA1 52f64a85f047d145cabf35d95074058a4a1e0d21
- SHA512 8775b14b996d2bc6b2fe8ff88c387f22afa8964010e6ab11e9fdc8fe7303b1c57153d812c8fb4821e5bbd6af783b471fdcf7d97034a9cd9e46f770bbd342a562
- SSDEEP 768:w4dk7A9NkcFabPUy71NebNSWap1u2LAY32G/PqiUgo3ou:wcoikcFMUy70abu2LAYrDo3
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  BotNets/WarBot/WarBot/Builder & Bot/RedTube.exe
- Size 56KB
- SHA256 a6859895c2d09752d0de2aef8701e1f0d7dbfb5f2382349fabc0e8356f090a00
- MD5 da1aba4a05e4045f3cfe1bdd26fafe85
- SHA1 52f64a85f047d145cabf35d95074058a4a1e0d21
- SHA512 8775b14b996d2bc6b2fe8ff88c387f22afa8964010e6ab11e9fdc8fe7303b1c57153d812c8fb4821e5bbd6af783b471fdcf7d97034a9cd9e46f770bbd342a562
- SSDEEP 768:w4dk7A9NkcFabPUy71NebNSWap1u2LAY32G/PqiUgo3ou:wcoikcFMUy70abu2LAYrDo3
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32