Overview

overview

10

Static

static

3

035f80e34d...b0.exe

windows7-x64

10

035f80e34d...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb1f4f495bc968a157626fbacf310516c5b13ed9b107c9c5822c9ca9bd842307

  • Size

    173KB

  • Sample

    240417-r9v5gaee3s

  • MD5

    2515167394702d46a99f49c0e94efdd8

  • SHA1

    7a9c246c46180f469d576f674cb5c64dba1196c4

  • SHA256

    bb1f4f495bc968a157626fbacf310516c5b13ed9b107c9c5822c9ca9bd842307

  • SHA512

    13c6dddb6220c2f75e2125e11b88219cb01f89e36640b330ce65065eb5dd65f60c6cdd0138381be0010ca38989b962e045db791bf9afd3937d7bd2a50d2c7960

  • SSDEEP

    3072:AXag3fctrs/4iStmV2pVHGebVxpmoEwAzr2nERXFJxhBm3TjzQZkqvQNTq6Y0EVv:WagPct+M82HH/0j26XFnhAPqaTfq1p5

Score
10/10
smokeloaderpub2backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Extracted

Family

smokeloader

Version

2022

C2

http://gxutc2c.com/tmp/index.php

http://proekt8.ru/tmp/index.php

http://mth.com.ua/tmp/index.php

http://pirateking.online/tmp/index.php

http://piratia.pw/tmp/index.php

http://go-piratia.ru/tmp/index.php
rc4.i32
rc4.i32

Targets

    • Target

      035f80e34dc781f15ce459e8e40683ad7e1d9fbd6f7ac4461d6cfde34cc8edb0.exe

    • Size

      301KB

    • MD5

      a67b46ffde56acb802ab5cb6357e5ded

    • SHA1

      0c76a65c47b3b92d1c133b7767ad176416c29045

    • SHA256

      035f80e34dc781f15ce459e8e40683ad7e1d9fbd6f7ac4461d6cfde34cc8edb0

    • SHA512

      1187124b110a1ef81e9337676870ee446fac137379d9bbc4e9d6ec4685b0fb95dde57f276c27ccc303f3b2d57da5e06456c083316911cf50f42f1e2ebe2b982c

    • SSDEEP

      3072:/8lLtOIPrkS7rJikDHhwNlJKJX7AXqikd2gB9p2ckaR/Ya0fTK7KVDrc+B5f239F:/8lLZDkST6+MXCd+Q0fTgYn79o6q

    Score
    10/10
    smokeloaderpub2backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks