Overview

overview

10

Static

static

3

581412f08e...c8.exe

windows7-x64

10

581412f08e...c8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bef19046886d0a76f0f8fbe8ca5043905884a7948fc3d535a361a4e210c9a2e3

  • Size

    176KB

  • Sample

    240417-r85yaaed6y

  • MD5

    c107750cd006df9009f701c576fd3480

  • SHA1

    63046546c462792daa0ce85c32d4dad0788bff06

  • SHA256

    bef19046886d0a76f0f8fbe8ca5043905884a7948fc3d535a361a4e210c9a2e3

  • SHA512

    5a7e9baaf192f76561ca4a47767a5ed97543cc341efb84ffc651e27e2ebf68a2cb3414b2e504fca9b828fe9bb1fa65e4ea64be1a4a5b957d14aaa0d57dfcc321

  • SSDEEP

    3072:NBO8lLex+sB/iZ2Et47ZzqWq9VHEcvwBgDSrsT+DwQctFvGiepvtij9OMZl4ssQC:NB7k+oi8Et47Zzq/VHEcug0sT+Dwttha

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://selebration17io.io/index.php

http://vacantion18ffeu.cc/index.php

http://valarioulinity1.net/index.php

http://buriatiarutuhuob.net/index.php

http://cassiosssionunu.me/index.php

http://sulugilioiu19.net/index.php

http://goodfooggooftool.net/index.php
rc4.i32
rc4.i32

Targets

    • Target

      581412f08e3333ebe7a4661f982106b1e395d3c8f384107df71db4768faec0c8.exe

    • Size

      312KB

    • MD5

      5a284c7f753ae16b6d2739e195ab6633

    • SHA1

      7198366d058a0816fb145e09ee34034d079fccf2

    • SHA256

      581412f08e3333ebe7a4661f982106b1e395d3c8f384107df71db4768faec0c8

    • SHA512

      5a376e1fc3435087c6827dd3fe3e6eaddd1f617d3beaf1e0dbd9583399d6d9b299ca9f60375c0e2398970eef04fc9ee14ba84b669422d57851caad7f083f4813

    • SSDEEP

      3072:9j8aOxWKuLtl+dJwqdN+8WZxmw9JCzW2Y/7ZYjY5n0HQGsR1hidO:96xELH+dlY8AwCkLY/tYe0HQlji

    Score
    10/10
    smokeloaderbackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks