General

  • Target

    39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657.exe

  • Size

    228KB

  • Sample

    240522-r5hctaeg87

  • MD5

    6dd21638dac079e394096b1b018d5638

  • SHA1

    b57f820d6bda6109f67155a5636965b034fd96d2

  • SHA256

    39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657

  • SHA512

    9b9d808236d9c432b9c9d87e5812daa99b3d0cf31c34da8477713dd575b5f0b9a05b362e367f530815a1e1a10789ae1aa93f9759e42fe309eea7f05b9a5e0d27

  • SSDEEP

    3072:Ar9ft1WgkACOZVw+UmB4dlXny76VrY4TKQHBAgzVLK0ImGTXuVnuBZ40Uda:AEdtKyVHRxBBYDmeuRCZ40

Malware Config

Extracted

Family

smokeloader

Botnet

rbrn

Extracted

Family

smokeloader

Version

2022

C2

http://stayherefata4l.org/index.php

http://masduh38sjdai.org/index.php

http://omfghellobrosjda38.org/index.php

rc4.i32
rc4.i32

Targets

    • Target

      39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657.exe

    • Size

      228KB

    • MD5

      6dd21638dac079e394096b1b018d5638

    • SHA1

      b57f820d6bda6109f67155a5636965b034fd96d2

    • SHA256

      39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657

    • SHA512

      9b9d808236d9c432b9c9d87e5812daa99b3d0cf31c34da8477713dd575b5f0b9a05b362e367f530815a1e1a10789ae1aa93f9759e42fe309eea7f05b9a5e0d27

    • SSDEEP

      3072:Ar9ft1WgkACOZVw+UmB4dlXny76VrY4TKQHBAgzVLK0ImGTXuVnuBZ40Uda:AEdtKyVHRxBBYDmeuRCZ40

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks