Overview

overview

10

Static

static

3

dc01209e1d...5f.exe

windows7-x64

10

dc01209e1d...5f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc01209e1da385103d7a5f9e993b1e079bedfdb6d4df02165724fee01962bb5f.exe

  • Size

    311KB

  • Sample

    240628-camlqavcre

  • MD5

    4dccbf41f0e18a74c12363f7df4b42f4

  • SHA1

    ed45004bdc194a163ae65d276a77e2f29a5087ca

  • SHA256

    dc01209e1da385103d7a5f9e993b1e079bedfdb6d4df02165724fee01962bb5f

  • SHA512

    7f7ccf8c89dce3752021c390b5248030b159886e2865f20382a9679f46f46e1efa0ccdbb7457755caf3bfc30d9efb8c4d343b90f35535781c51d0a0ff7c5c18e

  • SSDEEP

    3072:6C406L974BzV04SWUgjjN9ij5b+q5kcr/56QQMZ2eD32YRcQTTeABNY:6Cd6L9MtK4Ts5Kq5kcrXQMT32wTK

Score
10/10
smokeloaderpub2backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

    • Target

      dc01209e1da385103d7a5f9e993b1e079bedfdb6d4df02165724fee01962bb5f.exe

    • Size

      311KB

    • MD5

      4dccbf41f0e18a74c12363f7df4b42f4

    • SHA1

      ed45004bdc194a163ae65d276a77e2f29a5087ca

    • SHA256

      dc01209e1da385103d7a5f9e993b1e079bedfdb6d4df02165724fee01962bb5f

    • SHA512

      7f7ccf8c89dce3752021c390b5248030b159886e2865f20382a9679f46f46e1efa0ccdbb7457755caf3bfc30d9efb8c4d343b90f35535781c51d0a0ff7c5c18e

    • SSDEEP

      3072:6C406L974BzV04SWUgjjN9ij5b+q5kcr/56QQMZ2eD32YRcQTTeABNY:6Cd6L9MtK4Ts5Kq5kcrXQMT32wTK

    Score
    10/10
    smokeloaderpub2backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks