smokeloader | d8f2dc4cefb85694d686f72056cb8ad7f00bf39de2a545478e2b36f15d2f5ddc | Triage™

Login
Reports

Overview

overview

Static

static

1

setup.exe

windows7-x64

setup.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 178KB
Sample230321-cbjw8aac9s
SHA256 d8f2dc4cefb85694d686f72056cb8ad7f00bf39de2a545478e2b36f15d2f5ddc
MD5 0dc82954201970479ce7248911a2ac14
SHA1 e57db31a85811db6531e05ddeaccc56e11534945
SHA512 9660b69e018769e733602894795b76ef2c8aae3c6f8126cbbc603d37d694e0e092950af2c54805f40d0c867afaf9dccd66fdaf38ce6b005b633c97a676b842f4
SSDEEP 3072:E0I+VUzA7IfN+5ouiUOxAGh8T4VdWW82l4/4:6WUkdouuOGhx822
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

smokeloader lab backdoor trojan

Static task

static1

Behavioral task

behavioral1

Sample

setup.exe

Resource

win7-20230220-en

windows7-x64

7 signatures

150 seconds

smokeloader lab backdoor trojan

Behavioral task

behavioral2

Sample

setup.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

11 signatures

150 seconds

smokeloader lab backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

lab

Extracted

Family

smokeloader

Version

2020

C2

http://host-file-host6.com/
http://host-host-file8.com/

rc4.i32

rc4.i32

Targets

- Target
  setup.exe
- Size 178KB
- SHA256 d8f2dc4cefb85694d686f72056cb8ad7f00bf39de2a545478e2b36f15d2f5ddc
- MD5 0dc82954201970479ce7248911a2ac14
- SHA1 e57db31a85811db6531e05ddeaccc56e11534945
- SHA512 9660b69e018769e733602894795b76ef2c8aae3c6f8126cbbc603d37d694e0e092950af2c54805f40d0c867afaf9dccd66fdaf38ce6b005b633c97a676b842f4
- SSDEEP 3072:E0I+VUzA7IfN+5ouiUOxAGh8T4VdWW82l4/4:6WUkdouuOGhx822
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

smokeloader lab backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderlabbackdoortrojan

behavioral2

smokeloaderlabbackdoortrojan

© 2018-2026

Terms | Privacy