Overview

overview

10

Static

static

3

1de4898058...08.exe

windows7-x64

10

1de4898058...08.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3821a14f4e99603b476a9effed3ce1c345272832ff42ae0af3c62f263ef7b524

  • Size

    136KB

  • Sample

    240417-r3g92aea4z

  • MD5

    5caa5af7fe7a2aded3aefd306f5519fb

  • SHA1

    b6eff39477a7a76d58aeeacd3162c54d197a5583

  • SHA256

    3821a14f4e99603b476a9effed3ce1c345272832ff42ae0af3c62f263ef7b524

  • SHA512

    4426db019061734fc7539d09e5132c6ec3c34ef8eaecf42ba8b17516b4e64a907e7199263a359cb6d43540b00fe8dcf3ff53d2cd4001933c910cffe96fbd038d

  • SSDEEP

    3072:DncYY850yjt96+tdJRCJuaVQnKdXR0OdYfw2VtMD+N:DncIe/+tdJ+udKdXRTkE8

Score
10/10
smokeloaderpub3backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://gxutc2c.com/tmp/index.php

http://proekt8.ru/tmp/index.php

http://mth.com.ua/tmp/index.php

http://pirateking.online/tmp/index.php

http://piratia.pw/tmp/index.php

http://go-piratia.ru/tmp/index.php
rc4.i32
rc4.i32

Targets

    • Target

      1de489805895c5c666547d588f1d762dbc28b6be48002b99e3404957ecf8fc08.exe

    • Size

      215KB

    • MD5

      d7eb93b2a91b8ffee46a4a7d2e9dd232

    • SHA1

      66a5a5f393a5e5b6ab818ccc54df43dc0f27f3cd

    • SHA256

      1de489805895c5c666547d588f1d762dbc28b6be48002b99e3404957ecf8fc08

    • SHA512

      393ea6c24b91902fc5952a686371c4b9111aa2330dc269ebe71eb1fe884f34da642ca7c64bd578d27529a50db0abb0159b71b2215bcd2ef94015c295ed4ca2be

    • SSDEEP

      3072:P4MkECL7mTfhjJXcPHVFVEFxwWozt6pdtm6x85wpTygMXEfYw:P4T73c2FVEit646x85qygMXI

    Score
    10/10
    smokeloaderpub3backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks