smokeloader | ed12be618473902b7d05aec6def6e02a1aaee7e9b2f21866d2a3104c16a2832c | Triage™

Login
Reports

Overview

overview

Static

static

1

setup.exe

windows7-x64

setup.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 226KB
Sample230331-bjd59shd8v
SHA256 ed12be618473902b7d05aec6def6e02a1aaee7e9b2f21866d2a3104c16a2832c
MD5 2ccf3a050a103a30e35b1479014fbc1b
SHA1 c3b01d11c40422de2e925a2060d05b55760e4c05
SHA512 7984a899b5c73ae6f53928504cfd531f2b4b6a13133a715d055f716ecf64b316bbe3d0caa0bafcd0358d0c17f5fed7fe8d4845701f88c783d0233b67f014977d
SSDEEP 3072:upiFFpG3Wq+WJYd9TBbkLEKpQA0fC+I+xkD9fS/f9G3AZqaTrKfFue4hsU3Z8s0:uYY3WPiYdIl0fa++FS/f9EgqanF/
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

smokeloader lab backdoor trojan

Static task

static1

Behavioral task

behavioral1

Sample

setup.exe

Resource

win7-20230220-en

windows7-x64

7 signatures

150 seconds

smokeloader lab backdoor trojan

Behavioral task

behavioral2

Sample

setup.exe

Resource

win10v2004-20230221-en

windows10-2004-x64

9 signatures

150 seconds

smokeloader lab backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

lab

Extracted

Family

smokeloader

Version

2020

C2

http://host-file-host6.com/
http://host-host-file8.com/

rc4.i32

rc4.i32

Targets

- Target
  setup.exe
- Size 226KB
- SHA256 ed12be618473902b7d05aec6def6e02a1aaee7e9b2f21866d2a3104c16a2832c
- MD5 2ccf3a050a103a30e35b1479014fbc1b
- SHA1 c3b01d11c40422de2e925a2060d05b55760e4c05
- SHA512 7984a899b5c73ae6f53928504cfd531f2b4b6a13133a715d055f716ecf64b316bbe3d0caa0bafcd0358d0c17f5fed7fe8d4845701f88c783d0233b67f014977d
- SSDEEP 3072:upiFFpG3Wq+WJYd9TBbkLEKpQA0fC+I+xkD9fS/f9G3AZqaTrKfFue4hsU3Z8s0:uYY3WPiYdIl0fa++FS/f9EgqanF/
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

smokeloader lab backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderlabbackdoortrojan

behavioral2

smokeloaderlabbackdoortrojan

© 2018-2026

Terms | Privacy