Overview

overview

10

Static

static

3

f73c2ff7df...aa.exe

windows7-x64

10

f73c2ff7df...aa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6bcbbfac4eb7dbecb5a44983645a75db.bin

  • Size

    156KB

  • Sample

    240514-cptctafb2y

  • MD5

    c38a7977bdc99bd20638f9445a6e4d05

  • SHA1

    8bea33add489b8e50dd978cb894262e2167f5c9f

  • SHA256

    89c9b26f22784739494801cd3f063577240b378dd60becb3130cc9aaed0c2d00

  • SHA512

    2af7348baadd8951e3ee603ba3e7577a028670caf4b3703244aae7128db22c4e961fe01532b99fbdb562e15e798fa61980bc0e8b0a56771d7e0cefa9704c44df

  • SSDEEP

    3072:Fn2ElVuB82iAoLcZCWl7yHd3n8eqF/EJW18mMF+rKKzVxxxPP/TJGZioBC:x2Ea8XAoLSCiAqec/gWqN+rKKz/xxPP5

Score
10/10
smokeloaderpub1backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

    • Target

      f73c2ff7df05fca90c08e6ac7a30b97f56a5f62ddc1aed09e0970dc416f995aa.exe

    • Size

      240KB

    • MD5

      6bcbbfac4eb7dbecb5a44983645a75db

    • SHA1

      06335c12d2dc398efa4956674628debaf8a22b39

    • SHA256

      f73c2ff7df05fca90c08e6ac7a30b97f56a5f62ddc1aed09e0970dc416f995aa

    • SHA512

      550b13098d9842bc79b441721b6a93f085d75c274d7b5e0387fae87f9cf5a3566fb13694b5369149e093cb41a109fa015a9698f0553827c8c46c864083a54a33

    • SSDEEP

      3072:SR9BalQW+4t/2Rxpw3qcBsWkW+Nm/WXdJgr5QbgaHbWk18tKbTD94nXU3XnSo1s:SQEe619WZLSbgaH780pyXUSo

    Score
    10/10
    smokeloaderpub1backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks