Overview

overview

10

Static

static

3

f60c95f30f...18.exe

windows7-x64

10

f60c95f30f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f60c95f30fe926d132f8ec555c59e05f_JaffaCakes118

  • Size

    341KB

  • Sample

    240417-sgesfseh2w

  • MD5

    f60c95f30fe926d132f8ec555c59e05f

  • SHA1

    5904f810267aca6e13e4fd4af39ee18b308ec45d

  • SHA256

    81c92a70266966d4eea02e32ea31c85d1051228f3b80999537e9fd1315ee76f2

  • SHA512

    dcbdb71744994fbdab8ee6c2bc3342845f9286096c3527cc17f87cf9fb313c01a4648c5c4a066312c1b35ee871b20fa8bfdc2da0eea07be288dcefe2fc9b8f04

  • SSDEEP

    6144:aL1vaoWEIsVyW9Hxo0JexRIjS9SnNG3hYkt:Yvaoz4W9HxKrI+8o3

Score
10/10
smokeloaderpub6backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub6

Extracted

Family

smokeloader

Version

2020

C2

http://aucmoney.com/upload/

http://thegymmum.com/upload/

http://atvcampingtrips.com/upload/

http://kuapakualaman.com/upload/

http://renatazarazua.com/upload/

http://nasufmutlu.com/upload/
rc4.i32
rc4.i32

Targets

    • Target

      f60c95f30fe926d132f8ec555c59e05f_JaffaCakes118

    • Size

      341KB

    • MD5

      f60c95f30fe926d132f8ec555c59e05f

    • SHA1

      5904f810267aca6e13e4fd4af39ee18b308ec45d

    • SHA256

      81c92a70266966d4eea02e32ea31c85d1051228f3b80999537e9fd1315ee76f2

    • SHA512

      dcbdb71744994fbdab8ee6c2bc3342845f9286096c3527cc17f87cf9fb313c01a4648c5c4a066312c1b35ee871b20fa8bfdc2da0eea07be288dcefe2fc9b8f04

    • SSDEEP

      6144:aL1vaoWEIsVyW9Hxo0JexRIjS9SnNG3hYkt:Yvaoz4W9HxKrI+8o3

    Score
    10/10
    smokeloaderpub6backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks