smokeloader | cf2579e6cceceb29c703398db0e7feb9e744d669ce11b4b98a02b027098b93c7 | Triage

Submit
Reports

Overview

overview

Static

static

dridex

windows10_x64

Sharing

General

Target

cf2579e6cceceb29c703398db0e7feb9e744d669ce11b4b98a02b027098b93c7
Size

319KB
Sample

211203-rlgxyabgh4
MD5

5007e55140d0f49e1bea5e829c42b3e5
SHA1

2d7efb342126355f12ba4124ff09517b1992b3ad
SHA256

cf2579e6cceceb29c703398db0e7feb9e744d669ce11b4b98a02b027098b93c7
SHA512

6f3fbf3caa6174297b649125e7be919c770a8f899d73a77d4f7983b3d3c2f70c21d8e2b6150a4eeb658ee5969c1714457c463c61f051237f7898bd1ca6c737e5

Score

10^/10

smokeloader backdoor collection evasion trojan

Static task

static1

Behavioral task

behavioral1

Sample

cf2579e6cceceb29c703398db0e7feb9e744d669ce11b4b98a02b027098b93c7.exe

Resource

win10-en-20211014

smokeloader backdoor collection evasion trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

smokeloader

Version

2020

C2

https://cinems.club/search.php

https://clothes.surf/search.php

rc4.i32

rc4.i32

Targets

- Target
  
  cf2579e6cceceb29c703398db0e7feb9e744d669ce11b4b98a02b027098b93c7
- Size
  
  319KB
- MD5
  
  5007e55140d0f49e1bea5e829c42b3e5
- SHA1
  
  2d7efb342126355f12ba4124ff09517b1992b3ad
- SHA256
  
  cf2579e6cceceb29c703398db0e7feb9e744d669ce11b4b98a02b027098b93c7
- SHA512
  
  6f3fbf3caa6174297b649125e7be919c770a8f899d73a77d4f7983b3d3c2f70c21d8e2b6150a4eeb658ee5969c1714457c463c61f051237f7898bd1ca6c737e5
Score

10^/10

smokeloader backdoor collection evasion trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Modifies Windows Firewall
  evasion
- Deletes itself
- Accesses Microsoft Outlook profiles
  collection
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoorcollectionevasiontrojan

© 2018-2024

Terms | Privacy