Overview

overview

10

Static

static

3

1.exe

windows7-x64

10

1.exe

windows10-1703-x64

10

1.exe

windows10-2004-x64

10

1.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1.exe

  • Size

    227KB

  • Sample

    240625-m2xwwaydpk

  • MD5

    4c2fac8f9227cdb10b5b8056f396629b

  • SHA1

    3e84121bee19dd64d74ef41196a09894a6017d73

  • SHA256

    496f578f68fcef476f7c8d92322a3536f507e45704b8e1c87c56056e19c1e391

  • SHA512

    10297336f66bb57fd6d1d8a563dd507d05b79d63cec50e3069593055b1b21f41c8de10284f7d6d2ece981e68bd3970252f3e7700d0fa3f602867f5f5b95ed3b6

  • SSDEEP

    3072:1Jr6zgrn0rzKl3g5hxsrtYvyjIo3T8NAf68hu0nPsZciXcYW43hK:1hnezKl3UstVIo3T8ONhZPKVs

Score
10/10
smokeloaderpub1backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Extracted

Family

smokeloader

Version

2022

C2

http://movlat.com/tmp/

http://llcbc.org/tmp/

http://lindex24.ru/tmp/

http://qeqei.xyz/tmp/
rc4.i32
rc4.i32

Targets

    • Target

      1.exe

    • Size

      227KB

    • MD5

      4c2fac8f9227cdb10b5b8056f396629b

    • SHA1

      3e84121bee19dd64d74ef41196a09894a6017d73

    • SHA256

      496f578f68fcef476f7c8d92322a3536f507e45704b8e1c87c56056e19c1e391

    • SHA512

      10297336f66bb57fd6d1d8a563dd507d05b79d63cec50e3069593055b1b21f41c8de10284f7d6d2ece981e68bd3970252f3e7700d0fa3f602867f5f5b95ed3b6

    • SSDEEP

      3072:1Jr6zgrn0rzKl3g5hxsrtYvyjIo3T8NAf68hu0nPsZciXcYW43hK:1hnezKl3UstVIo3T8ONhZPKVs

    Score
    10/10
    smokeloaderpub1backdoortrojan
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks