Overview

overview

10

Static

static

3

c2c188e126...28.exe

windows7-x64

10

c2c188e126...28.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    753af9f603dabb57bd4ee34f88b113ef7a223f404a30ba7faeea003bfb9632b4

  • Size

    159KB

  • Sample

    240417-sac1aaee5x

  • MD5

    57eb385752e803fbd42333e57495bf66

  • SHA1

    a2c0d614afd402b39a24ef77b8848fd0c468cb7b

  • SHA256

    753af9f603dabb57bd4ee34f88b113ef7a223f404a30ba7faeea003bfb9632b4

  • SHA512

    c710582b3d6a42c79c045ce5cf0677dc097a6433a14ddea4d22d0748194edac0278faf2e2a3713fedab0d0804befe75ec9f8ed4387ffdd518772104392a6eef6

  • SSDEEP

    3072:F1yaSmF0biXGoW6c7YeOvrFLvSiybf1e7f3Mwu6s5S1/O6Q2/KIQRTETRbz:6aAiXGXDEeurF5ybf+K6s5StO6zSZTI1

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://sinuptinulium.net/index.php

http://thethuthe3.net/index.php

http://rakutenmakutern.net/index.php

http://sindusyndy.net/index.php

http://lovelyloversbouuyrs.net/index.php

http://stanystarysturu.net/index.php

http://tybytimemunutere.net/index.php

http://opengamerstypepsy.net/index.php

http://lumustruoues.net/index.php
rc4.i32
rc4.i32

Targets

    • Target

      c2c188e1268c54261a51deaee8c99af06ec604bf7e873c88e01e3b3d95e0d028.exe

    • Size

      278KB

    • MD5

      cbe4329ac835d571cf71add90df141df

    • SHA1

      09f34b4135cdf60037831d75439f51f2d13430be

    • SHA256

      c2c188e1268c54261a51deaee8c99af06ec604bf7e873c88e01e3b3d95e0d028

    • SHA512

      28b079f23e911145ea4c54d5522118b01e1d32539b12cff864f02f72cf422068b54dd18ee8b7768b8e6c4543960a06691ef82f291e53c077407168fe486318ff

    • SSDEEP

      6144:xfDULURU43mpD7z9FLytuGjy9kFjk3Or/3v8w:xfDUwU4349kFjk3IU

    Score
    10/10
    smokeloaderbackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks