Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4af1a7681e02a58e5d5fcbe2d6acc3fe5b156b2dd063cc79a2679c4e3c363b50

  • Size

    238KB

  • Sample

    240702-d8ybjstfnh

  • MD5

    b5a355306678b70242f1ddec88c59add

  • SHA1

    550323041f1406b027fab0e982fa53935def8b91

  • SHA256

    4af1a7681e02a58e5d5fcbe2d6acc3fe5b156b2dd063cc79a2679c4e3c363b50

  • SHA512

    f68ce62931583350c334067570a6fc43e7bbb140eeb4c021d9fa5a4e8fe44d97dedf8e00614c32c071584c7aff463f526e3f70254cdb6799060b74fae8e40661

  • SSDEEP

    3072:+WkzbZcSlPPtD7xYEr7vVw0qV891bCMcRSsaz1TN:+tbCSlPPtDlBtCMcPaz1T

Score
10/10
smokeloaderpub2backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

    • Target

      4af1a7681e02a58e5d5fcbe2d6acc3fe5b156b2dd063cc79a2679c4e3c363b50

    • Size

      238KB

    • MD5

      b5a355306678b70242f1ddec88c59add

    • SHA1

      550323041f1406b027fab0e982fa53935def8b91

    • SHA256

      4af1a7681e02a58e5d5fcbe2d6acc3fe5b156b2dd063cc79a2679c4e3c363b50

    • SHA512

      f68ce62931583350c334067570a6fc43e7bbb140eeb4c021d9fa5a4e8fe44d97dedf8e00614c32c071584c7aff463f526e3f70254cdb6799060b74fae8e40661

    • SSDEEP

      3072:+WkzbZcSlPPtD7xYEr7vVw0qV891bCMcRSsaz1TN:+tbCSlPPtDlBtCMcPaz1T

    Score
    10/10
    smokeloaderpub2backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks