Overview

overview

10

Static

static

3

10dbe605fd...e6.exe

windows10-2004-x64

10

10dbe605fd...e6.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    10dbe605fd72cb147a95eadc7b7fff74d8012f2eb99d07f9d33e9df7c377c2e6.exe
  • Size 4.1MB
  • Sample260703-cxvwlsas7v
  • SHA256 10dbe605fd72cb147a95eadc7b7fff74d8012f2eb99d07f9d33e9df7c377c2e6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
smokeloaderpub2backdoordiscoverypersistencetrojan

Malware Config

Extracted

Family

  • smokeloader

Botnet

  • pub2

Extracted

Family

  • smokeloader

Version

  • 2020

C2

  • http://4zavr.com/upload/

  • http://zynds.com/upload/

  • http://atvua.com/upload/

  • http://detse.net/upload/

  • http://dsdett.com/upload/

  • http://dtabasee.com/upload/

  • http://yeronogles.monster/upload/

rc4.i32
rc4.i32

Targets

    • Target
      10dbe605fd72cb147a95eadc7b7fff74d8012f2eb99d07f9d33e9df7c377c2e6.exe
    • Size 4.1MB
    • SHA256 10dbe605fd72cb147a95eadc7b7fff74d8012f2eb99d07f9d33e9df7c377c2e6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoorpub2discoverysmokeloaderpersistencetrojan

    • Family: SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks