Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a8af14bff518a9930230eef22be1a44e38a843a16bcded30ab38e344bc47362

  • Size

    190KB

  • Sample

    240408-fvr9gshe66

  • MD5

    204e7ef6d2e34f1cb4951f80a98b7016

  • SHA1

    9d3921efcd09ea06b1e02badd5248bccb829eb4e

  • SHA256

    5a8af14bff518a9930230eef22be1a44e38a843a16bcded30ab38e344bc47362

  • SHA512

    32fbf81d4f951f4242326ae77d3d64226d3b43b04a12d7322378be054ba82a30ff1f379370c1d552bc89faa216ba9e4979037bdf4b20c79b7014108b94d5f534

  • SSDEEP

    3072:8zUhffq/KrDI/Y9KSBvYNnS1Zt0PW/fyelUpnQPqpah:8y3q/KfI/YBoGCWfyeupQPqpa

Score
10/10
smokeloaderpub3backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

    • Target

      5a8af14bff518a9930230eef22be1a44e38a843a16bcded30ab38e344bc47362

    • Size

      190KB

    • MD5

      204e7ef6d2e34f1cb4951f80a98b7016

    • SHA1

      9d3921efcd09ea06b1e02badd5248bccb829eb4e

    • SHA256

      5a8af14bff518a9930230eef22be1a44e38a843a16bcded30ab38e344bc47362

    • SHA512

      32fbf81d4f951f4242326ae77d3d64226d3b43b04a12d7322378be054ba82a30ff1f379370c1d552bc89faa216ba9e4979037bdf4b20c79b7014108b94d5f534

    • SSDEEP

      3072:8zUhffq/KrDI/Y9KSBvYNnS1Zt0PW/fyelUpnQPqpah:8y3q/KfI/YBoGCWfyeupQPqpa

    Score
    10/10
    smokeloaderpub3backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks