Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9e1e37480c2f56146ec054036c2381aa258cb36a6b6a297c17c5d80632b7668

  • Size

    311KB

  • Sample

    240624-yaqh9szame

  • MD5

    6a2ac4b10406479fd7cf58784013f6ee

  • SHA1

    f76c41987df6e3bdf622ec4e2ebed63350ed880a

  • SHA256

    e9e1e37480c2f56146ec054036c2381aa258cb36a6b6a297c17c5d80632b7668

  • SHA512

    aee521c9c05cc5accd551d8cf143db12235200fc6068cef9c25b668968bfd7852758064186f1b39c11278ff73b570000e917c7d0a4d6b8baa6c907041b586f45

  • SSDEEP

    3072:5d6pJbLVMkmgVuBvB0GIF1qllRHv4ppdXA40XNCjD95bUgFJLQLtJLQLv0:5ApRLekmIGWNF1k47PLUgFo

Score
10/10
smokeloaderpub1backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

    • Target

      e9e1e37480c2f56146ec054036c2381aa258cb36a6b6a297c17c5d80632b7668

    • Size

      311KB

    • MD5

      6a2ac4b10406479fd7cf58784013f6ee

    • SHA1

      f76c41987df6e3bdf622ec4e2ebed63350ed880a

    • SHA256

      e9e1e37480c2f56146ec054036c2381aa258cb36a6b6a297c17c5d80632b7668

    • SHA512

      aee521c9c05cc5accd551d8cf143db12235200fc6068cef9c25b668968bfd7852758064186f1b39c11278ff73b570000e917c7d0a4d6b8baa6c907041b586f45

    • SSDEEP

      3072:5d6pJbLVMkmgVuBvB0GIF1qllRHv4ppdXA40XNCjD95bUgFJLQLtJLQLv0:5ApRLekmIGWNF1k47PLUgFo

    Score
    10/10
    smokeloaderpub1backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks