Overview

overview

10

Static

static

3

30608da257...ad.exe

windows7-x64

10

30608da257...ad.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec096a9de3f8597eeac6ca03f8afd525482f913d92bd2e60a2bfea21747edae8

  • Size

    146KB

  • Sample

    240417-rtpyhsde3t

  • MD5

    e9625c923d4346c73aab531f0831d412

  • SHA1

    a765d3e403b5b1d23252544e0d4885226fe5b9d8

  • SHA256

    ec096a9de3f8597eeac6ca03f8afd525482f913d92bd2e60a2bfea21747edae8

  • SHA512

    adc7e799c6751ab1cc6f5f1d2be0e8529a23feec511489c6753f2e9d483df8ceee2aa92dfe44f755e7a81151b5c36e7f9086dda749dac2e49be8c57b37b0456d

  • SSDEEP

    3072:aDpOfVsOj0+DmDOMXERrOigTz2coHK9AUCTyzXv08fa/mGc:aDYfKyXWpGSO/iCTMXv0heGc

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://selebration17io.io/index.php

http://vacantion18ffeu.cc/index.php

http://valarioulinity1.net/index.php

http://buriatiarutuhuob.net/index.php

http://cassiosssionunu.me/index.php

http://sulugilioiu19.net/index.php

http://goodfooggooftool.net/index.php
rc4.i32
rc4.i32

Targets

    • Target

      30608da257143510f5ae45ac0bb9c1f1dc4db384fe2bf86110c1fc6a1863e9ad.exe

    • Size

      243KB

    • MD5

      eceb992b85b4b71ebbb9e18176927d90

    • SHA1

      33dbf17a76eb79971f7bec537b6e4d03e522608e

    • SHA256

      30608da257143510f5ae45ac0bb9c1f1dc4db384fe2bf86110c1fc6a1863e9ad

    • SHA512

      0e784fe4212019f1dcd7126672824b84eaba05d036da8a9ef4183e26cb95bc16cb070ffe6f7a78067a59a8cb715f5569b3942c87b14356ef80caf0d43306f634

    • SSDEEP

      3072:+5wJ2lvSrbBrRWGIGf/qs5WATCz0J4d/87GkcgTdNRunrcSO4Dtl16/AaqP:h2lvSrqB7AAR/8+zrNh

    Score
    10/10
    smokeloaderbackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks