Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a38aec8fedbc45d9511fde4acafe9bbda2952f3238a20d2f59d56f6ef7a4cc1

  • Size

    230KB

  • Sample

    240706-hen81aygql

  • MD5

    ca129a51cb5f1fe1d3d879229be87266

  • SHA1

    c4a0846917f0a42515a36b11ec43e84b22620c47

  • SHA256

    9a38aec8fedbc45d9511fde4acafe9bbda2952f3238a20d2f59d56f6ef7a4cc1

  • SHA512

    0034bfed8564d7449e3d1c796007301ef342e7c0265d48771ae2c07755dd916e737c6464cde1f3958096eadcbb9fa1d9b47a3bd6553895a5ccefd2e4e7c22d0d

  • SSDEEP

    6144:ZYqKXKiajRjAAsBbBessrIykV3Dv/m0auYeW:ZYqKX1yREbBessrIbr/+

Score
10/10
smokeloaderpub2backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

    • Target

      9a38aec8fedbc45d9511fde4acafe9bbda2952f3238a20d2f59d56f6ef7a4cc1

    • Size

      230KB

    • MD5

      ca129a51cb5f1fe1d3d879229be87266

    • SHA1

      c4a0846917f0a42515a36b11ec43e84b22620c47

    • SHA256

      9a38aec8fedbc45d9511fde4acafe9bbda2952f3238a20d2f59d56f6ef7a4cc1

    • SHA512

      0034bfed8564d7449e3d1c796007301ef342e7c0265d48771ae2c07755dd916e737c6464cde1f3958096eadcbb9fa1d9b47a3bd6553895a5ccefd2e4e7c22d0d

    • SSDEEP

      6144:ZYqKXKiajRjAAsBbBessrIykV3Dv/m0auYeW:ZYqKX1yREbBessrIbr/+

    Score
    10/10
    smokeloaderpub2backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks