Overview

overview

10

Static

static

3

1f622a1e8e...18.exe

windows7-x64

10

1f622a1e8e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f622a1e8ea2dac58321083ee4bf0db5_JaffaCakes118

  • Size

    128KB

  • Sample

    240702-p5qcbaxdjm

  • MD5

    1f622a1e8ea2dac58321083ee4bf0db5

  • SHA1

    2a82e45485f07a258005f0223e88b724389117d2

  • SHA256

    f9addcdeb422d93736dc4f9842636bff9417ce95542adeab79a0cba5c5d4f769

  • SHA512

    62dc6f5637b0bd68e4784ac136e0decca7edc7204153ea7aa267b9960dfadbcf2a02db7068f05abf47c558284affa4f9823c13f0440d549c17b0e55b090771bb

  • SSDEEP

    1536:cGeFPVQOb+vbwBKUHzCJIvdwl0yVqrav17P4VVeW2dWRg0MCLjCK0KZd2F:Gb+vb0KUO2vq+yVq817gVrtMiCK0i8

Score
10/10
smokeloaderku11backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

ku11

Targets

    • Target

      1f622a1e8ea2dac58321083ee4bf0db5_JaffaCakes118

    • Size

      128KB

    • MD5

      1f622a1e8ea2dac58321083ee4bf0db5

    • SHA1

      2a82e45485f07a258005f0223e88b724389117d2

    • SHA256

      f9addcdeb422d93736dc4f9842636bff9417ce95542adeab79a0cba5c5d4f769

    • SHA512

      62dc6f5637b0bd68e4784ac136e0decca7edc7204153ea7aa267b9960dfadbcf2a02db7068f05abf47c558284affa4f9823c13f0440d549c17b0e55b090771bb

    • SSDEEP

      1536:cGeFPVQOb+vbwBKUHzCJIvdwl0yVqrav17P4VVeW2dWRg0MCLjCK0KZd2F:Gb+vb0KUO2vq+yVq817gVrtMiCK0i8

    Score
    10/10
    smokeloaderku11backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks