smokeloader

General

Target

setup.exe
Size

216KB
Sample

230426-agllwsfg4t
MD5

c62b1e63a285f2178660a6af20fa7c66
SHA1

5e6e446b0ca93a0a6bd97cef8925e69443057b5d
SHA256

e1acc5a9139ef016cc95311b184a218178fbf8c3d9e8bbf7dd5a5c83ecdc5d51
SHA512

8b531abbaf9ea113bdb0bb76dd774d87ae55b36d4e561e8bb354a58c2c7555a79c964eeb3a740360a9ce4350ddbac751874aec024584a3e11b081c1105ca1a58
SSDEEP

3072:Q7oZPjwYHQnfooIrqKfbfvX6SfEsBhfWB5iQ5:nPSnfdRibnXp1RQ

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Botnet

sprg

Extracted

Family

smokeloader

Version

2022

C2

http://hoh0aeghwugh2gie.com/

http://hie7doodohpae4na.com/

http://aek0aicifaloh1yo.com/

http://yic0oosaeiy7ahng.com/

http://wa5zu7sekai8xeih.com/

rc4.i32

Targets

- Target
  
  setup.exe
- Size
  
  216KB
- MD5
  
  c62b1e63a285f2178660a6af20fa7c66
- SHA1
  
  5e6e446b0ca93a0a6bd97cef8925e69443057b5d
- SHA256
  
  e1acc5a9139ef016cc95311b184a218178fbf8c3d9e8bbf7dd5a5c83ecdc5d51
- SHA512
  
  8b531abbaf9ea113bdb0bb76dd774d87ae55b36d4e561e8bb354a58c2c7555a79c964eeb3a740360a9ce4350ddbac751874aec024584a3e11b081c1105ca1a58
- SSDEEP
  
  3072:Q7oZPjwYHQnfooIrqKfbfvX6SfEsBhfWB5iQ5:nPSnfdRibnXp1RQ
Score

10^/10

smokeloader sprg backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2