smokeloader | f0f32bfe6277bb7d507e9ac7ffc72c85230e99352168136d66cc73e5898cd408 | Triage

Sharing

General

Target

f0f32bfe6277bb7d507e9ac7ffc72c85230e99352168136d66cc73e5898cd408
Size

265KB
Sample

230327-3pvhzshg51
MD5

fef570cafc077e302fd07b2dd59e7265
SHA1

1486ba4af2bbe43aa7334fdd03ff80b2777fc497
SHA256

f0f32bfe6277bb7d507e9ac7ffc72c85230e99352168136d66cc73e5898cd408
SHA512

627afc69aa15e278b5dee0161df92516ca88fd7d5a9a44882bd861a2ca39944ce73a6a9e1e12c2cdedd1356ea8640a697368120174d9f5348c98152faef852ff
SSDEEP

3072:AjO8RHyGl/COeLQO7+g1WFcSmASjXp15Q0K7Qnx/YL5ktQCU3wsUfsX:CJ5yG8OeLrYFcS70Xp1m0Kox/R

Score

10^/10

smokeloader sprg backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

sprg

Extracted

Family

smokeloader

Version

2022

C2

http://hoh0aeghwugh2gie.com/

http://hie7doodohpae4na.com/

http://aek0aicifaloh1yo.com/

http://yic0oosaeiy7ahng.com/

http://wa5zu7sekai8xeih.com/

rc4.i32

rc4.i32

Targets

- Target
  
  f0f32bfe6277bb7d507e9ac7ffc72c85230e99352168136d66cc73e5898cd408
- Size
  
  265KB
- MD5
  
  fef570cafc077e302fd07b2dd59e7265
- SHA1
  
  1486ba4af2bbe43aa7334fdd03ff80b2777fc497
- SHA256
  
  f0f32bfe6277bb7d507e9ac7ffc72c85230e99352168136d66cc73e5898cd408
- SHA512
  
  627afc69aa15e278b5dee0161df92516ca88fd7d5a9a44882bd861a2ca39944ce73a6a9e1e12c2cdedd1356ea8640a697368120174d9f5348c98152faef852ff
- SSDEEP
  
  3072:AjO8RHyGl/COeLQO7+g1WFcSmASjXp15Q0K7Qnx/YL5ktQCU3wsUfsX:CJ5yG8OeLrYFcS70Xp1m0Kox/R
Score

10^/10

smokeloader sprg backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

smokeloadersprgbackdoortrojan