Overview

overview

10

Static

static

3

5e0aaef7a1...80.exe

windows7-x64

10

5e0aaef7a1...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea0da6936d41ce6d14dc8e5446d0465625b17bebfd63210c170545591301e9b1

  • Size

    149KB

  • Sample

    240417-r5te3scg29

  • MD5

    bc6bff5aea0872014accac62556720ae

  • SHA1

    feda10b2b6988ad4ec7f43d8647c57cdbbd47aff

  • SHA256

    ea0da6936d41ce6d14dc8e5446d0465625b17bebfd63210c170545591301e9b1

  • SHA512

    4a1ddc5a5aef4f948769e46afd0b533daf18af2fd817cdca4e7fb0f4d36d77707217041342867a0d67029bd447c2e6df6a492e33d1c6842e251d214587e09b39

  • SSDEEP

    3072:vhXKeLkwCaFtAmfMfKBmu20bs2tieU2Sk1ER1Qf4dBgFDgSk3Xqd6qdgULFi2cOf:xKeLHCaFag209t/H1ER1Y4dBGDrUI3gC

Score
10/10
smokeloaderpub2backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Extracted

Family

smokeloader

Version

2022

C2

http://gxutc2c.com/tmp/index.php

http://proekt8.ru/tmp/index.php

http://mth.com.ua/tmp/index.php

http://pirateking.online/tmp/index.php

http://piratia.pw/tmp/index.php

http://go-piratia.ru/tmp/index.php
rc4.i32
rc4.i32

Targets

    • Target

      5e0aaef7a11699f74d8d72c980ebe025a54444f2ed042b5fec52a9f616089d80.exe

    • Size

      242KB

    • MD5

      937a9a861bdd2471626e194df3c4e572

    • SHA1

      c94e5a5d1b07899c9f5dda3eb00d35e527ce95e6

    • SHA256

      5e0aaef7a11699f74d8d72c980ebe025a54444f2ed042b5fec52a9f616089d80

    • SHA512

      e56afceef17be2470ed64adededd07cd031027f860520d7dfbca33faba086ea84646bf15f598a424cbeb06fb725a7a8a92f9435381fed60daf885b1ba974baae

    • SSDEEP

      6144:sD++HfRqEQFnP3gnLd+SI23tq/VO8HhBsU6:2++HfRqEQFnPGLd+SI23t6cYhBZ

    Score
    10/10
    smokeloaderpub2backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks