smokeloader | 3a62f4c67368f13afd64615e5832085514eb3cb82554b4860399d3c0638c92e4 | Triage

Sharing

General

Target

3a62f4c67368f13afd64615e5832085514eb3cb82554b4860399d3c0638c92e4
Size

29KB
Sample

230713-yw71fabg5t
MD5

751dd472c61b174351d8f98ce5619a7d
SHA1

2e39bf76ec369180c70b90241c4f626bceb83036
SHA256

3a62f4c67368f13afd64615e5832085514eb3cb82554b4860399d3c0638c92e4
SHA512

af7cc44d9f983f23fec9d8da7f941f04d32996c6a66bbae21493f512296f5cb51f9886a85dcc342fb193a54b564839c13661ce0201d8511f494accede155dab7
SSDEEP

768:DZtWVWcTpwQC9OYYr+8PQsWnIaEr927h1:DZtVQ/Fr+aoz511

Score

10^/10

smokeloader backdoor trojan

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://cletonmy.com/

http://alpatrik.com/

rc4.i32

rc4.i32

Targets

- Target
  
  3a62f4c67368f13afd64615e5832085514eb3cb82554b4860399d3c0638c92e4
- Size
  
  29KB
- MD5
  
  751dd472c61b174351d8f98ce5619a7d
- SHA1
  
  2e39bf76ec369180c70b90241c4f626bceb83036
- SHA256
  
  3a62f4c67368f13afd64615e5832085514eb3cb82554b4860399d3c0638c92e4
- SHA512
  
  af7cc44d9f983f23fec9d8da7f941f04d32996c6a66bbae21493f512296f5cb51f9886a85dcc342fb193a54b564839c13661ce0201d8511f494accede155dab7
- SSDEEP
  
  768:DZtWVWcTpwQC9OYYr+8PQsWnIaEr927h1:DZtVQ/Fr+aoz511
Score

10^/10

smokeloader backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan