smokeloader | 878b9453053e9f577409c80b3f62aa772162c9138ce9cfcc6cfbd59a074e1e70 | Triage™

Login
Reports

Overview

overview

Static

static

3

dridex

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
878b9453053e9f577409c80b3f62aa772162c9138ce9cfcc6cfbd59a074e1e70
Size 305KB
Sample230924-1ycnesbc97
SHA256 878b9453053e9f577409c80b3f62aa772162c9138ce9cfcc6cfbd59a074e1e70
MD5 77896d2d72a6bacaca4384f46a89e2eb
SHA1 b7e194f17d7e7510ff5d787e34f9fb75c2b86fc1
SHA512 fa2f663f06fbad69062e44a471a236e5a268fe6776eb5eceaeadc48f47937601466571b88e2e0fa3525aeeeffcb8c0b561d2b22e30086947b2544b3e8fef4b5b
SSDEEP 6144:oIX0jgaPV/7drqQC0wzYzqRtPuTos0U2:oLMa9/7w0WWqRJcf
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

smokeloader pub1 backdoor trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

878b9453053e9f577409c80b3f62aa772162c9138ce9cfcc6cfbd59a074e1e70.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

8 signatures

150 seconds

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Extracted

Family

smokeloader

Version

2020

C2

http://host-file-host6.com/
http://host-host-file8.com/

rc4.i32

rc4.i32

Targets

- Target
  878b9453053e9f577409c80b3f62aa772162c9138ce9cfcc6cfbd59a074e1e70
- Size 305KB
- SHA256 878b9453053e9f577409c80b3f62aa772162c9138ce9cfcc6cfbd59a074e1e70
- MD5 77896d2d72a6bacaca4384f46a89e2eb
- SHA1 b7e194f17d7e7510ff5d787e34f9fb75c2b86fc1
- SHA512 fa2f663f06fbad69062e44a471a236e5a268fe6776eb5eceaeadc48f47937601466571b88e2e0fa3525aeeeffcb8c0b561d2b22e30086947b2544b3e8fef4b5b
- SSDEEP 6144:oIX0jgaPV/7drqQC0wzYzqRtPuTos0U2:oLMa9/7w0WWqRJcf
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

© 2018-2026

Terms | Privacy