smokeloader | 192deb8eeb134013704376b3ad57489f4a5a7ccdce143a0cb6f85e3fba30685e | Triage

Submit
Reports

Overview

overview

Static

static

dridex

windows10_x64

Sharing

General

Target

192deb8eeb134013704376b3ad57489f4a5a7ccdce143a0cb6f85e3fba30685e
Size

318KB
Sample

211203-staz2abhd8
MD5

9c19b04b344bf751303f7eef8151fad2
SHA1

2c55aef05d35cfed61012fd898f2e7d2e6a15267
SHA256

192deb8eeb134013704376b3ad57489f4a5a7ccdce143a0cb6f85e3fba30685e
SHA512

6e3ce6c68e96e7ac1a608f07b0afaaf06534bc46e6bda32215638e9a17207e51ed8558a62a51062acd2a30c55b883bd75522bb2bf1b11b3e75438fb026156469

Score

10^/10

smokeloader backdoor collection evasion trojan

Static task

static1

Behavioral task

behavioral1

Sample

192deb8eeb134013704376b3ad57489f4a5a7ccdce143a0cb6f85e3fba30685e.exe

Resource

win10-en-20211014

smokeloader backdoor collection evasion trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

smokeloader

Version

2020

C2

https://cinems.club/search.php

https://clothes.surf/search.php

rc4.i32

rc4.i32

Targets

- Target
  
  192deb8eeb134013704376b3ad57489f4a5a7ccdce143a0cb6f85e3fba30685e
- Size
  
  318KB
- MD5
  
  9c19b04b344bf751303f7eef8151fad2
- SHA1
  
  2c55aef05d35cfed61012fd898f2e7d2e6a15267
- SHA256
  
  192deb8eeb134013704376b3ad57489f4a5a7ccdce143a0cb6f85e3fba30685e
- SHA512
  
  6e3ce6c68e96e7ac1a608f07b0afaaf06534bc46e6bda32215638e9a17207e51ed8558a62a51062acd2a30c55b883bd75522bb2bf1b11b3e75438fb026156469
Score

10^/10

smokeloader backdoor collection evasion trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Modifies Windows Firewall
  evasion
- Deletes itself
- Accesses Microsoft Outlook profiles
  collection
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoorcollectionevasiontrojan

© 2018-2024

Terms | Privacy