Overview

overview

10

Static

static

3

dd02b4f834...fb.exe

windows7-x64

10

dd02b4f834...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8baca5b39f860e63c00b27f50ef2dc6e308d0cfef5d27f49348f32ec70e9a92

  • Size

    176KB

  • Sample

    240417-r88zyaed7v

  • MD5

    2a09b569131c5333aa189ee9aa9d2daa

  • SHA1

    502a861dfd407547f7b43d0264b34b2e72e091f8

  • SHA256

    c8baca5b39f860e63c00b27f50ef2dc6e308d0cfef5d27f49348f32ec70e9a92

  • SHA512

    781cd400c23da382712491f5d07dff82c7045e94910c588814cd12308d8de4e2aaa4c9c9e78366c7eafa563e2cf58c409c47dc6c18d9817560594ba44ee75826

  • SSDEEP

    3072:1/t9XCLtGu5kaoBJXDBU5DYBD62q/nUHSPyFbGyZz53RkhrtP1Q/b7o:1/twLge6q8yaFqqzFMrtW/b8

Score
10/10
smokeloaderpub1backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Extracted

Family

smokeloader

Version

2020

C2

http://host-file-host6.com/

http://host-host-file8.com/
rc4.i32
rc4.i32

Targets

    • Target

      dd02b4f83462302b06278dea2591a9d32ab4534743f96b44b24d642e55b721fb.exe

    • Size

      312KB

    • MD5

      3ed9f2c6339d6513940c15d4a58378af

    • SHA1

      bd75e9514537bb38e9ba648c92a837e7d8d7b66d

    • SHA256

      dd02b4f83462302b06278dea2591a9d32ab4534743f96b44b24d642e55b721fb

    • SHA512

      530d1c04fd3acc0a35b54221ae5e25b4ab02fdf656bfda516bab009e94f292cffec83a8480cf95c3bacddc295a845206e6409658c837c3c78f0d1aca5cdf8036

    • SSDEEP

      6144:V6xELH+Ym/eqLhvhXfRWK4Pg343g77ji:cxEL+HeqLh2K45QX

    Score
    10/10
    smokeloaderpub1backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks