Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52b5a1a5d600a29be1bd62d2a43b5322127b7c2847f6646afacae511ded674fb

  • Size

    311KB

  • Sample

    240627-s42kqszhkr

  • MD5

    46bac5a24ef4bd2193e3cf7e4bec9b43

  • SHA1

    6ad0d9b72ddb31c50880d45a72e42364ed6390cc

  • SHA256

    52b5a1a5d600a29be1bd62d2a43b5322127b7c2847f6646afacae511ded674fb

  • SHA512

    4e1269965d0fd43049db3f302219e3d939d91148e2c4b1d1c304af11ac38f8bdf3b88ca6a392962fa06a28dda651d15eb7e61d8a8d1b24d323656be967e55a0b

  • SSDEEP

    3072:DC0X7LbNEfjgkTtOPeNHirQJle95rQQMZ2eDYwSBeABNY:DCy7LbO7/ByOCMJlecQMTH

Score
10/10
smokeloaderpub2backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

    • Target

      52b5a1a5d600a29be1bd62d2a43b5322127b7c2847f6646afacae511ded674fb

    • Size

      311KB

    • MD5

      46bac5a24ef4bd2193e3cf7e4bec9b43

    • SHA1

      6ad0d9b72ddb31c50880d45a72e42364ed6390cc

    • SHA256

      52b5a1a5d600a29be1bd62d2a43b5322127b7c2847f6646afacae511ded674fb

    • SHA512

      4e1269965d0fd43049db3f302219e3d939d91148e2c4b1d1c304af11ac38f8bdf3b88ca6a392962fa06a28dda651d15eb7e61d8a8d1b24d323656be967e55a0b

    • SSDEEP

      3072:DC0X7LbNEfjgkTtOPeNHirQJle95rQQMZ2eDYwSBeABNY:DCy7LbO7/ByOCMJlecQMTH

    Score
    10/10
    smokeloaderpub2backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks