Overview

overview

10

Static

static

3

70d1cc794a...18.exe

windows7-x64

10

70d1cc794a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70d1cc794ab7a0899043544c2c6cc42f_JaffaCakes118

  • Size

    234KB

  • Sample

    240525-eq7b6seb96

  • MD5

    70d1cc794ab7a0899043544c2c6cc42f

  • SHA1

    0d8335573bc87aa6857781fed39c42ebb7027e28

  • SHA256

    555b6940cce4c237104255d8f02d92b21b8c09dbed6b242986309d920ce911bc

  • SHA512

    df33fa184fae916c2b3b6197fd46ad2943b6b037b45b7083b60d10acc6ea63d9bfac9457b2178cb0bb181157ca33b62c404fc4d4b7963a9605f932dc7db5f1ef

  • SSDEEP

    3072:KGkYDUXS0FxFctZQ/bSfzpxTXcKmzmRaHaLQW0GAQq6hGj0F5YyMZdIDVsPHYp:9qhKpxztmDHaLQWNAL6TAyqjfO

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Extracted

Family

smokeloader

Version

2020

C2

http://naritouzina.net/

http://nukaraguasleep.net/

http://notfortuaj.net/

http://natuturalistic.net/

http://zaniolofusa.net/
rc4.i32
rc4.i32

Targets

    • Target

      70d1cc794ab7a0899043544c2c6cc42f_JaffaCakes118

    • Size

      234KB

    • MD5

      70d1cc794ab7a0899043544c2c6cc42f

    • SHA1

      0d8335573bc87aa6857781fed39c42ebb7027e28

    • SHA256

      555b6940cce4c237104255d8f02d92b21b8c09dbed6b242986309d920ce911bc

    • SHA512

      df33fa184fae916c2b3b6197fd46ad2943b6b037b45b7083b60d10acc6ea63d9bfac9457b2178cb0bb181157ca33b62c404fc4d4b7963a9605f932dc7db5f1ef

    • SSDEEP

      3072:KGkYDUXS0FxFctZQ/bSfzpxTXcKmzmRaHaLQW0GAQq6hGj0F5YyMZdIDVsPHYp:9qhKpxztmDHaLQWNAL6TAyqjfO

    Score
    10/10
    smokeloaderbackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks