Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb

  • Size

    239KB

  • Sample

    240627-28jedsxdrb

  • MD5

    e0a475f2ac0e9c3dad905d8ce84f62cb

  • SHA1

    6b789faafed3e4e2d318c9ec9300f9ba3c865374

  • SHA256

    b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb

  • SHA512

    a23d30a9fc9d2560fe37b6d9ab334576e956412ca7841f63f051a54aa77a4e3bcf6b1b5e4e28304b06fde02028b20c6ff1297f750c4735281168164d3397cf46

  • SSDEEP

    3072:wiPU1EqslJWmOppnTiT6q5I6+vLXmdXSXxw14UUXmNXMQrF9aH3W:M1E/lJo1TiTDGdvLXcXSh7NEbc

Score
10/10
smokeloaderpub1backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

    • Target

      b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb

    • Size

      239KB

    • MD5

      e0a475f2ac0e9c3dad905d8ce84f62cb

    • SHA1

      6b789faafed3e4e2d318c9ec9300f9ba3c865374

    • SHA256

      b59e52b83b0a0cde0085b3ba306316a86a845a974cbeaf45da905476b6db53bb

    • SHA512

      a23d30a9fc9d2560fe37b6d9ab334576e956412ca7841f63f051a54aa77a4e3bcf6b1b5e4e28304b06fde02028b20c6ff1297f750c4735281168164d3397cf46

    • SSDEEP

      3072:wiPU1EqslJWmOppnTiT6q5I6+vLXmdXSXxw14UUXmNXMQrF9aH3W:M1E/lJo1TiTDGdvLXcXSh7NEbc

    Score
    10/10
    smokeloaderpub1backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks