Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e60bea3d38a728df8557f3702b3cf9212e295793f523b175849dd53d7099d9b

  • Size

    238KB

  • Sample

    240701-t8p8yasepq

  • MD5

    c9b782d391ff2590061786a5541d70e1

  • SHA1

    d21d474024fa1dcfb79d6d6cd46cfde31e607216

  • SHA256

    2e60bea3d38a728df8557f3702b3cf9212e295793f523b175849dd53d7099d9b

  • SHA512

    f9a828a6d082db2dc678609b2ab52a5b550bc19876b3b83b692414f19e6a6a8e68d07913c27b0a6d56f2ee00a6ec1e8e6d72ab5764625b15fccf0dd14fd72776

  • SSDEEP

    3072:QhFhd4jn4g4/Zm5p4SaHGuk594GOYWjpROb3yNFkFCc2QOhopL3TBtZ:Q1dun4g4/M5pA2anYWjnacF+4QOhADT

Score
10/10
smokeloaderpub2backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

    • Target

      2e60bea3d38a728df8557f3702b3cf9212e295793f523b175849dd53d7099d9b

    • Size

      238KB

    • MD5

      c9b782d391ff2590061786a5541d70e1

    • SHA1

      d21d474024fa1dcfb79d6d6cd46cfde31e607216

    • SHA256

      2e60bea3d38a728df8557f3702b3cf9212e295793f523b175849dd53d7099d9b

    • SHA512

      f9a828a6d082db2dc678609b2ab52a5b550bc19876b3b83b692414f19e6a6a8e68d07913c27b0a6d56f2ee00a6ec1e8e6d72ab5764625b15fccf0dd14fd72776

    • SSDEEP

      3072:QhFhd4jn4g4/Zm5p4SaHGuk594GOYWjpROb3yNFkFCc2QOhopL3TBtZ:Q1dun4g4/M5pA2anYWjnacF+4QOhADT

    Score
    10/10
    smokeloaderpub2backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks