General

  • Target

    fc43d9f8e3ccfeaa9c8401ce64a1658b_JaffaCakes118

  • Size

    261KB

  • Sample

    240420-jkberscd81

  • MD5

    fc43d9f8e3ccfeaa9c8401ce64a1658b

  • SHA1

    cf96e0085826bfd855f8189cd1b47cf94cf5bd69

  • SHA256

    43299f7d7e65c228e865efcdab3838f1fa099e5508f98b947935cc51728a8a60

  • SHA512

    4cf90f27f13e4f7602dd8f99c06f04f7265f6d62bf6e10da065690855141a2c3ae0fd89dd1c000868ec49ce3124ef7be87630a6bb4cb2289b32f81684b144d8b

  • SSDEEP

    6144:zsc5Y8WF/SG7Op8XbhHxG+L2mc5CqBWnKHH/IAg+:B5EF/VOpOhRGawHBWnQI

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2020

C2

http://aucmoney.com/upload/

http://thegymmum.com/upload/

http://atvcampingtrips.com/upload/

http://kuapakualaman.com/upload/

http://renatazarazua.com/upload/

http://nasufmutlu.com/upload/

rc4.i32
rc4.i32

Targets

    • Target

      fc43d9f8e3ccfeaa9c8401ce64a1658b_JaffaCakes118

    • Size

      261KB

    • MD5

      fc43d9f8e3ccfeaa9c8401ce64a1658b

    • SHA1

      cf96e0085826bfd855f8189cd1b47cf94cf5bd69

    • SHA256

      43299f7d7e65c228e865efcdab3838f1fa099e5508f98b947935cc51728a8a60

    • SHA512

      4cf90f27f13e4f7602dd8f99c06f04f7265f6d62bf6e10da065690855141a2c3ae0fd89dd1c000868ec49ce3124ef7be87630a6bb4cb2289b32f81684b144d8b

    • SSDEEP

      6144:zsc5Y8WF/SG7Op8XbhHxG+L2mc5CqBWnKHH/IAg+:B5EF/VOpOhRGawHBWnQI

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks