Overview

overview

10

Static

static

10

b59e52b83b...mp.exe

windows7-x64

10

b59e52b83b...mp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb_dump.exe

  • Size

    40KB

  • Sample

    240622-ha681svejm

  • MD5

    b4aa2b5e8f460a5b2731d538f5f7a0a7

  • SHA1

    46084497cdde44312db2c86da72d0e932b4ac169

  • SHA256

    1ab2666172b3ad1123fafce0a407cf1b1cff9f32ef124d431bfa69e921219e38

  • SHA512

    87e678534d3beef2c65b85b9db5a5742b86439349c3ea9cb4dbd361b0c303ae17f6c7dc243257b39dc5bd3c443ba11f3d1f9e831b071fe07828898cf08a1655f

  • SSDEEP

    768:xLtE5GK+qS4tpITHhRx3kwfOX5VAEMiyQjEDlrSlV:fE5Grt48THhRhfOX7AtZDJS/

Score
10/10
smokeloaderpub1backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

    • Target

      b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb_dump.exe

    • Size

      40KB

    • MD5

      b4aa2b5e8f460a5b2731d538f5f7a0a7

    • SHA1

      46084497cdde44312db2c86da72d0e932b4ac169

    • SHA256

      1ab2666172b3ad1123fafce0a407cf1b1cff9f32ef124d431bfa69e921219e38

    • SHA512

      87e678534d3beef2c65b85b9db5a5742b86439349c3ea9cb4dbd361b0c303ae17f6c7dc243257b39dc5bd3c443ba11f3d1f9e831b071fe07828898cf08a1655f

    • SSDEEP

      768:xLtE5GK+qS4tpITHhRx3kwfOX5VAEMiyQjEDlrSlV:fE5Grt48THhRhfOX7AtZDJS/

    Score
    10/10
    smokeloaderpub1backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks