User tags

Assigned on submission by the user, not by sandbox detections.

Threatview.io Proactive Hunter

General

  • Target

    sample6.exe

  • Size

    303KB

  • Sample

    240407-cmfc6sah29

  • MD5

    ceaa361db12c482e95a8b83e2de2af2f

  • SHA1

    7288d4cfcea6a4e478354bb15f06d3af82ec9cfc

  • SHA256

    1efbc80ffd55c78287134a11add66b10bf7b2cd724913721a7f305d483050593

  • SHA512

    94ca0bc39bbdc92672215daf4df1c9d5d9e288bb6097eb8a147bf3816dda1b992d971faa39ed0ee5daf1e4b2cbeaf3ff5a683834e66d47c474f6591d711a0fbb

  • SSDEEP

    3072:ZQzJkBHCgU0lpcWt+sNX2VYXSjNr6gYatNEnZnKZI6DOZWCwbUcP1KS:EkBPmWtt2rZYzyI6DOUCwb1Pw

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://nidoe.org/tmp/index.php

http://sodez.ru/tmp/index.php

http://uama.com.ua/tmp/index.php

http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      sample6.exe

    • Size

      303KB

    • MD5

      ceaa361db12c482e95a8b83e2de2af2f

    • SHA1

      7288d4cfcea6a4e478354bb15f06d3af82ec9cfc

    • SHA256

      1efbc80ffd55c78287134a11add66b10bf7b2cd724913721a7f305d483050593

    • SHA512

      94ca0bc39bbdc92672215daf4df1c9d5d9e288bb6097eb8a147bf3816dda1b992d971faa39ed0ee5daf1e4b2cbeaf3ff5a683834e66d47c474f6591d711a0fbb

    • SSDEEP

      3072:ZQzJkBHCgU0lpcWt+sNX2VYXSjNr6gYatNEnZnKZI6DOZWCwbUcP1KS:EkBPmWtt2rZYzyI6DOUCwb1Pw

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks