smokeloader

General

Target

c7e25075b3d4200b1c9ef102c4c32eb2.exe
Size

236KB
Sample

230419-tjjpvsbg25
MD5

c7e25075b3d4200b1c9ef102c4c32eb2
SHA1

e0ac9316bfd05f46ad7da13526ec2d5b03202046
SHA256

683f0358815c8f598b1fe8b537e072a515115da4d2e63fcc6e9ffbf61870d3c0
SHA512

8c32854ee4aa14ef5ceb249fe37e13d142c3cc0eb0f23dc10a0b95f6598e87eb5fdf97b5d1d101caf0472e0b3899cf0adf4c56bd96048fe3987f8adb6c22a476
SSDEEP

3072:1Xble7H5QnsEQP6MzIM28KFy9XwHUHgG/Nf5/FEWwYPDpJKJRfeI:NleVXEQiMMM28KA9XLgMNhFaYPDWJ

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Botnet

sprg

Extracted

Family

smokeloader

Version

2022

C2

http://hoh0aeghwugh2gie.com/

http://hie7doodohpae4na.com/

http://aek0aicifaloh1yo.com/

http://yic0oosaeiy7ahng.com/

http://wa5zu7sekai8xeih.com/

rc4.i32

Targets

- Target
  
  c7e25075b3d4200b1c9ef102c4c32eb2.exe
- Size
  
  236KB
- MD5
  
  c7e25075b3d4200b1c9ef102c4c32eb2
- SHA1
  
  e0ac9316bfd05f46ad7da13526ec2d5b03202046
- SHA256
  
  683f0358815c8f598b1fe8b537e072a515115da4d2e63fcc6e9ffbf61870d3c0
- SHA512
  
  8c32854ee4aa14ef5ceb249fe37e13d142c3cc0eb0f23dc10a0b95f6598e87eb5fdf97b5d1d101caf0472e0b3899cf0adf4c56bd96048fe3987f8adb6c22a476
- SSDEEP
  
  3072:1Xble7H5QnsEQP6MzIM28KFy9XwHUHgG/Nf5/FEWwYPDpJKJRfeI:NleVXEQiMMM28KA9XLgMNhFaYPDWJ
Score

10^/10

smokeloader sprg backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

3

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Extracted

Extracted

Targets

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2