Overview

overview

10

Static

static

3

172a2e4828...18.exe

windows7-x64

10

172a2e4828...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    172a2e482842f20094b2ba32237021ea_JaffaCakes118

  • Size

    134KB

  • Sample

    240627-xpvk4avhpg

  • MD5

    172a2e482842f20094b2ba32237021ea

  • SHA1

    376c3901dfa7465d483d894ddc685f65ea7dedc1

  • SHA256

    2e60745315889d95ce4121ed41af14ac33337218c701d236a9a463754bb5bca5

  • SHA512

    7e71848d5d60713b5685a90264aece8bdb4bcc02e23930cb72e135213c52be638a531970531fea446b75d0ae1c6904f8eedc51a6fd5b76062043b18f60db7cc7

  • SSDEEP

    3072:wQ1nyrQwd5G2E3px3wNGrJRW2jSMBCaqnbeLJXd3:wQ1nunsrR2WCaqbeNJ

Score
10/10
smokeloaderli11backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

li11

Targets

    • Target

      172a2e482842f20094b2ba32237021ea_JaffaCakes118

    • Size

      134KB

    • MD5

      172a2e482842f20094b2ba32237021ea

    • SHA1

      376c3901dfa7465d483d894ddc685f65ea7dedc1

    • SHA256

      2e60745315889d95ce4121ed41af14ac33337218c701d236a9a463754bb5bca5

    • SHA512

      7e71848d5d60713b5685a90264aece8bdb4bcc02e23930cb72e135213c52be638a531970531fea446b75d0ae1c6904f8eedc51a6fd5b76062043b18f60db7cc7

    • SSDEEP

      3072:wQ1nyrQwd5G2E3px3wNGrJRW2jSMBCaqnbeLJXd3:wQ1nunsrR2WCaqbeNJ

    Score
    10/10
    smokeloaderli11backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks