smokeloader

General

Target

f4280052008abdb62c26a27c61678350c57c70d726361cb8846ee126e83eaf0f.zip
Size

141KB
Sample

230308-mgngpseh9t
MD5

471c2b1a90d03a62362bf83e6963dcac
SHA1

cd5df46f10cc2a0db09780c85c9524923018a4ab
SHA256

4cab5bf4d3895cb21a7e46560378d738954e693b891c42afd63d15645384a4ce
SHA512

f5b96c52e6f2987f71d7417745cb42a1977b1fd71a696f5b8db7e09a2044aa500b81c4bb648c1afdf922a157230915de9c288df2cddc3334ac4f561854cbcff9
SSDEEP

3072:EC5tAYhDOLWLz7wyBPgubhfhLtuqDsS4AxDpsV9RSpe:57UCMyBPjLtuqDaoqgpe

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://hoh0aeghwugh2gie.com/

http://hie7doodohpae4na.com/

http://aek0aicifaloh1yo.com/

http://yic0oosaeiy7ahng.com/

http://wa5zu7sekai8xeih.com/

rc4.i32

Targets

- Target
  
  f4280052008abdb62c26a27c61678350c57c70d726361cb8846ee126e83eaf0f.exe
- Size
  
  206KB
- MD5
  
  c71fe44880b57b069e6a6aa17a40f9e5
- SHA1
  
  21f523091d704b6024be3f270c06e716d27d246d
- SHA256
  
  f4280052008abdb62c26a27c61678350c57c70d726361cb8846ee126e83eaf0f
- SHA512
  
  eef2d069abd301ed6a3b047d0fa5b4795e30ebc34309e1de6e057f7ad6fd01267a89b02978cf5fa855a348c96a86c899797a723d541b20dcc7d4b3999d709d09
- SSDEEP
  
  3072:24C8x2RySvUVDwaBQ3Onm3IdAECGFxlHed5huUaTaQIbDCPPjAXPSQ:bNxwySUZwaBQ3OB7FLgXHXKPj
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Smokeloader packer

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2