Overview

overview

10

Static

static

3

00043dfa22...b5.exe

windows7-x64

10

00043dfa22...b5.exe

windows10-1703-x64

10

00043dfa22...b5.exe

windows10-2004-x64

10

003baf8fb8...b6.exe

windows7-x64

10

003baf8fb8...b6.exe

windows10-1703-x64

10

003baf8fb8...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    samples.zip

  • Size

    254KB

  • Sample

    240529-b4sjdsdc8v

  • MD5

    6694cba3bba1098ad9347c5e8ea6c49f

  • SHA1

    8e51bad6b888c2e33354bd77d6772041ecbe03ef

  • SHA256

    78ffb8426b47cac183d50f6ae9ac80525d4f316ccf46bcd9d181d1459138a471

  • SHA512

    b31be005a3b76fc4401759a3e6192bea24d94c9c162dcaed5d41e86c9db59976bb7d608d030b7696d7251920bf3715a0071cf9a1fb14c2454b4e041ccd34a203

  • SSDEEP

    6144:ZSZN8miF7hDWfD8h4MYiaMEmyIRAugU1Tagi6mOosss7pn:ZSDJD7MYiaMEoJgMpn3os/pn

Score
10/10
smokeloaderlabpub1backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Extracted

Family

smokeloader

Botnet

lab

Targets

    • Target

      00043dfa22ecfa878b76ad185f091123430dbbc1610140b28ff9036e4a7b53b5

    • Size

      242KB

    • MD5

      6dfe59a2d3549e3a6f300adbced09e1f

    • SHA1

      273d5108cf4ed196e766d910c24f2305feaf7d2b

    • SHA256

      00043dfa22ecfa878b76ad185f091123430dbbc1610140b28ff9036e4a7b53b5

    • SHA512

      55e52cb24702a31a56b963b9c8566c14dbd4b0f80cb63606f54d84dd80edf458631e9af2ad15d17a4e4c931fc6fb104b844f8271fb4eb0bda3ebc73e2fa37aaf

    • SSDEEP

      3072:Ig1HtQbUh5cAV1J3n4Lou+shC7bA4fV+5ugUI:51HcUXfnu2PdfVl1

    Score
    10/10
    smokeloaderpub1backdoortrojan
    behavioral1behavioral2behavioral3

    • Target

      003baf8fb85ce28e21505c8a72d76c67f6aa2b107bae82662d1b56f68198ceb6

    • Size

      213KB

    • MD5

      c143fa19a5123ae26eb5871035bf3f29

    • SHA1

      b972a83d721f1b596234e198880b7a726af6b768

    • SHA256

      003baf8fb85ce28e21505c8a72d76c67f6aa2b107bae82662d1b56f68198ceb6

    • SHA512

      ec756a7e5cc130d774170fdbc0af86a3c66530f24725d470b560fcb127c8b91786bbac85b17175dd6ef0dbdaf52160fda936e40f19772139e9bbf4353d2717f0

    • SSDEEP

      6144:sjd0dJL6inu2Z2GTo7nUHP0Q39vvg3ClIAU0V6:ud0zOeu2No70P0mv4Sl2O

    Score
    10/10
    smokeloaderlabbackdoortrojan
    behavioral4behavioral5behavioral6

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

2
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks