Overview

overview

10

Static

static

3

f1c5830624...18.exe

windows7-x64

10

f1c5830624...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1c5830624b7c9b5a12a512b4d068588_JaffaCakes118

  • Size

    174KB

  • Sample

    240415-ydssssgf7s

  • MD5

    f1c5830624b7c9b5a12a512b4d068588

  • SHA1

    845a61713dc2e5719384cd3e386c55f15964af39

  • SHA256

    6cd842ba79e3e1f17176c9a3b9d6eb92b1c5086a190a0a66da9dc7da1dbc60dc

  • SHA512

    1590e56e4df7a15a35f237b68e952815c1eb502f9c827c8b8f441cf5cefe2f9b5d30cd30375a3452a765f2d617b63e343c84b51c1442ce22874f2ac60de1467c

  • SSDEEP

    1536:dXJvfon7Mss3R55JQ+kXQjeDAEpXSX6hT2dLuIkp3iv2qbW5A0hPMObXfADldeZQ:dSn7Ps3HrQU8p92dLcgbW5A0xxYDlK

Score
10/10
smokeloaderpub2backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Extracted

Family

smokeloader

Version

2020

C2

http://aucmoney.com/upload/

http://thegymmum.com/upload/

http://atvcampingtrips.com/upload/

http://kuapakualaman.com/upload/

http://renatazarazua.com/upload/

http://nasufmutlu.com/upload/
rc4.i32
rc4.i32

Targets

    • Target

      f1c5830624b7c9b5a12a512b4d068588_JaffaCakes118

    • Size

      174KB

    • MD5

      f1c5830624b7c9b5a12a512b4d068588

    • SHA1

      845a61713dc2e5719384cd3e386c55f15964af39

    • SHA256

      6cd842ba79e3e1f17176c9a3b9d6eb92b1c5086a190a0a66da9dc7da1dbc60dc

    • SHA512

      1590e56e4df7a15a35f237b68e952815c1eb502f9c827c8b8f441cf5cefe2f9b5d30cd30375a3452a765f2d617b63e343c84b51c1442ce22874f2ac60de1467c

    • SSDEEP

      1536:dXJvfon7Mss3R55JQ+kXQjeDAEpXSX6hT2dLuIkp3iv2qbW5A0hPMObXfADldeZQ:dSn7Ps3HrQU8p92dLcgbW5A0xxYDlK

    Score
    10/10
    smokeloaderpub2backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks