smokeloader | 95d8f84527ed99a54d78814885cd6ed270ad3ddf539b40b1f692c4a5bc6cea71 | Triage

Submit
Reports

Overview

overview

Static

static

dridex

windows10_x64

Sharing

General

Target

95d8f84527ed99a54d78814885cd6ed270ad3ddf539b40b1f692c4a5bc6cea71
Size

239KB
Sample

220127-fv482sgdd3
MD5

b683d3c9f84ab47199db9ac37701452f
SHA1

fa8c4e3b8104b48908d79d90ae714e97c6ba2b4c
SHA256

95d8f84527ed99a54d78814885cd6ed270ad3ddf539b40b1f692c4a5bc6cea71
SHA512

245ba76a7731836ccaa9e80e0c4650fd5abc062dc29158b4a1e57b6b36c2cba08a2cba4e07df1b039af03a6207ed17a4884ea83c41e88c4a7ce3b977396b7d42

Score

10^/10

smokeloader backdoor collection evasion trojan

Static task

static1

Behavioral task

behavioral1

Sample

95d8f84527ed99a54d78814885cd6ed270ad3ddf539b40b1f692c4a5bc6cea71.exe

Resource

win10-en-20211208

smokeloader backdoor collection evasion trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

smokeloader

Version

2020

C2

https://oakland-studio.video/search.php

https://seattle-university.video/search.php

rc4.i32

rc4.i32

Targets

- Target
  
  95d8f84527ed99a54d78814885cd6ed270ad3ddf539b40b1f692c4a5bc6cea71
- Size
  
  239KB
- MD5
  
  b683d3c9f84ab47199db9ac37701452f
- SHA1
  
  fa8c4e3b8104b48908d79d90ae714e97c6ba2b4c
- SHA256
  
  95d8f84527ed99a54d78814885cd6ed270ad3ddf539b40b1f692c4a5bc6cea71
- SHA512
  
  245ba76a7731836ccaa9e80e0c4650fd5abc062dc29158b4a1e57b6b36c2cba08a2cba4e07df1b039af03a6207ed17a4884ea83c41e88c4a7ce3b977396b7d42
Score

10^/10

smokeloader backdoor collection evasion trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Modifies Windows Firewall
  evasion
- Deletes itself
- Accesses Microsoft Outlook profiles
  collection
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Command-Line Interface

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Process Discovery

Lateral Movement

Collection

Email Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

smokeloaderbackdoorcollectionevasiontrojan

© 2018-2024

Terms | Privacy