General

  • Target

    f0e6e0db2654751696c9410a073d50a0d45befe21ab6f2c7056eaf13adf3a0ed

  • Size

    261KB

  • Sample

    240526-resqvsha2y

  • MD5

    b9398314a6c856a4ed21988038441d8e

  • SHA1

    1337be3f468bee8ad3cbffc3beb5795035d6d697

  • SHA256

    f0e6e0db2654751696c9410a073d50a0d45befe21ab6f2c7056eaf13adf3a0ed

  • SHA512

    0bdcdb81c19201ee752dfb4ddcb53a3d02492f905f8a8675572c2e98d3e8e9c518876dea05a070eeaf73d2aecae7735a113c1feeea2ddb28d76a8b41077fc0e0

  • SSDEEP

    3072:w5VoCf12MUYpCUNZZ+QdelVMCukkW6rdWmAeUv+v+AQVv7rrEI3zdxLb6xTx7:wF2MxpNZZHRCpMWmAhcD4zr4o7LWT

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

    • Target

      f0e6e0db2654751696c9410a073d50a0d45befe21ab6f2c7056eaf13adf3a0ed

    • Size

      261KB

    • MD5

      b9398314a6c856a4ed21988038441d8e

    • SHA1

      1337be3f468bee8ad3cbffc3beb5795035d6d697

    • SHA256

      f0e6e0db2654751696c9410a073d50a0d45befe21ab6f2c7056eaf13adf3a0ed

    • SHA512

      0bdcdb81c19201ee752dfb4ddcb53a3d02492f905f8a8675572c2e98d3e8e9c518876dea05a070eeaf73d2aecae7735a113c1feeea2ddb28d76a8b41077fc0e0

    • SSDEEP

      3072:w5VoCf12MUYpCUNZZ+QdelVMCukkW6rdWmAeUv+v+AQVv7rrEI3zdxLb6xTx7:wF2MxpNZZHRCpMWmAhcD4zr4o7LWT

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks