General

  • Target

    e5453104d30224ac773e12cdb6aa2e35_JaffaCakes118

  • Size

    29KB

  • Sample

    240407-s33fmsga44

  • MD5

    e5453104d30224ac773e12cdb6aa2e35

  • SHA1

    4eba4f3a85e3c627d8e06145abf9ca1b4983b128

  • SHA256

    dba8a86324bf04cc9cfd982456c1427340ab41900bee122a01f28b948654465d

  • SHA512

    814ea0a2d15d5ac5cd79a0362a61e03613061e8ff493ce5165c98dc0d2a04184b16abe10a4c1eee4f31c1f08e81ef67db475a5e7ff10ea6476e8252b801e24ba

  • SSDEEP

    384:bs+R5mGiTFPYRhebJwkRrVoPGZXYgCGzLzXB1OMZzDJEPGYvdbiWmAnw3/DIN9r:4AQjHJrVrCurBP5DJav9LvUe9E

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2020

C2

http://directorycart.com/upload/

http://tierzahnarzt.at/upload/

http://streetofcards.com/upload/

http://ycdfzd.com/upload/

http://successcoachceo.com/upload/

http://uhvu.cn/upload/

http://japanarticle.com/upload/

rc4.i32
rc4.i32

Targets

    • Target

      e5453104d30224ac773e12cdb6aa2e35_JaffaCakes118

    • Size

      29KB

    • MD5

      e5453104d30224ac773e12cdb6aa2e35

    • SHA1

      4eba4f3a85e3c627d8e06145abf9ca1b4983b128

    • SHA256

      dba8a86324bf04cc9cfd982456c1427340ab41900bee122a01f28b948654465d

    • SHA512

      814ea0a2d15d5ac5cd79a0362a61e03613061e8ff493ce5165c98dc0d2a04184b16abe10a4c1eee4f31c1f08e81ef67db475a5e7ff10ea6476e8252b801e24ba

    • SSDEEP

      384:bs+R5mGiTFPYRhebJwkRrVoPGZXYgCGzLzXB1OMZzDJEPGYvdbiWmAnw3/DIN9r:4AQjHJrVrCurBP5DJav9LvUe9E

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks