Overview

overview

10

Static

static

3

11de658ef2...18.exe

windows7-x64

10

11de658ef2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11de658ef262fbc43703de74192456af_JaffaCakes118

  • Size

    157KB

  • Sample

    240626-nr43wawbmj

  • MD5

    11de658ef262fbc43703de74192456af

  • SHA1

    ba1b7b96fe9f9107ce50107e6f0d32015d3763a6

  • SHA256

    475a1194bf004df0c0af3c150e21b264285c1912054756e0d2751dfbb80b45cd

  • SHA512

    0adaa42f0f3dc5f985dbb1f9b1b3ce58b8cde7d86b134c4659879879a8252084e4b5461c5ed0bf2de869e8757e0c7c20b79a308341786c3eeacd687b510bdb31

  • SSDEEP

    3072:NcWtgtdyyOVdcK3ZkeXr7C4HUDyWGI+hrqoWHMCK7dzw7OI:NfqtdyP3pTXi4CyRhW1sCK7h

Score
10/10
smokeloaderli11backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

li11

Targets

    • Target

      11de658ef262fbc43703de74192456af_JaffaCakes118

    • Size

      157KB

    • MD5

      11de658ef262fbc43703de74192456af

    • SHA1

      ba1b7b96fe9f9107ce50107e6f0d32015d3763a6

    • SHA256

      475a1194bf004df0c0af3c150e21b264285c1912054756e0d2751dfbb80b45cd

    • SHA512

      0adaa42f0f3dc5f985dbb1f9b1b3ce58b8cde7d86b134c4659879879a8252084e4b5461c5ed0bf2de869e8757e0c7c20b79a308341786c3eeacd687b510bdb31

    • SSDEEP

      3072:NcWtgtdyyOVdcK3ZkeXr7C4HUDyWGI+hrqoWHMCK7dzw7OI:NfqtdyP3pTXi4CyRhW1sCK7h

    Score
    10/10
    smokeloaderli11backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks