smokeloader

General

Target

setup.exe
Size

293KB
Sample

230329-b1tmaaga2v
MD5

c06f9aad75142dbab17566983724fa53
SHA1

d7d4bf3cb86fa67deffc916793bc70ea314a6f8f
SHA256

87c1317444d15330dc15efe48648658aeebd80a477f763f535695815a7848713
SHA512

976b59275e68cfec31c2a7975d8ca656f66096b02d2a10c42d03bc353b72d0fa9794c36db18cea8ccdf9b7c26dd599c1a548c67bd4217f12e26e5c4d823a18af
SSDEEP

3072:uUJ/+k9A2BOlMG9qx494GSsZ2k3s3EqV8x+rH2Cf+8QPMsN6qTWWvQfo:vXtBuV9qSfsERxSWCG8g8

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Botnet

sprg

Extracted

Family

smokeloader

Version

2022

C2

http://hoh0aeghwugh2gie.com/

http://hie7doodohpae4na.com/

http://aek0aicifaloh1yo.com/

http://yic0oosaeiy7ahng.com/

http://wa5zu7sekai8xeih.com/

rc4.i32

Targets

- Target
  
  setup.exe
- Size
  
  293KB
- MD5
  
  c06f9aad75142dbab17566983724fa53
- SHA1
  
  d7d4bf3cb86fa67deffc916793bc70ea314a6f8f
- SHA256
  
  87c1317444d15330dc15efe48648658aeebd80a477f763f535695815a7848713
- SHA512
  
  976b59275e68cfec31c2a7975d8ca656f66096b02d2a10c42d03bc353b72d0fa9794c36db18cea8ccdf9b7c26dd599c1a548c67bd4217f12e26e5c4d823a18af
- SSDEEP
  
  3072:uUJ/+k9A2BOlMG9qx494GSsZ2k3s3EqV8x+rH2Cf+8QPMsN6qTWWvQfo:vXtBuV9qSfsERxSWCG8g8
Score

10^/10

smokeloader sprg backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2