Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f90cea24860958c854d0c23e2ed212d3f3a5a0153de6fd5a1787e8bd43d450ef

  • Size

    277KB

  • Sample

    240627-yzvvaa1bmq

  • MD5

    76b1ec59ae9a482c80e7675eda6223f4

  • SHA1

    dbc82e21a2c2465d7789fb52068809cbf9fd9046

  • SHA256

    f90cea24860958c854d0c23e2ed212d3f3a5a0153de6fd5a1787e8bd43d450ef

  • SHA512

    8c90574bf9daa49819033ba66716316a47392192e1976dd6f7be675b32befbebc5a651d45bd7356dd0f79a3f5a359bc75fcc91849a29c8b67716ba07d0893948

  • SSDEEP

    3072:YKDLoC809RlGIwMI7VlOtm+OxD755cJ1+ZtQXG4LYXvH5ddkxrj:YOLoC8Qa7VlOtmZ8uZtQOXvsrj

Score
10/10
smokeloaderpub2backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

    • Target

      f90cea24860958c854d0c23e2ed212d3f3a5a0153de6fd5a1787e8bd43d450ef

    • Size

      277KB

    • MD5

      76b1ec59ae9a482c80e7675eda6223f4

    • SHA1

      dbc82e21a2c2465d7789fb52068809cbf9fd9046

    • SHA256

      f90cea24860958c854d0c23e2ed212d3f3a5a0153de6fd5a1787e8bd43d450ef

    • SHA512

      8c90574bf9daa49819033ba66716316a47392192e1976dd6f7be675b32befbebc5a651d45bd7356dd0f79a3f5a359bc75fcc91849a29c8b67716ba07d0893948

    • SSDEEP

      3072:YKDLoC809RlGIwMI7VlOtm+OxD755cJ1+ZtQXG4LYXvH5ddkxrj:YOLoC8Qa7VlOtmZ8uZtQOXvsrj

    Score
    10/10
    smokeloaderpub2backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks