smokeloader

General

Target

file
Size

267KB
Sample

231011-kqqmbacc3t
MD5

97e58a64090cb6f872c94a67eb2bee5c
SHA1

79a87878bd9c3d2d73f31eb2248ad7aebf70f5e7
SHA256

185031cb27faf0d5aa70d1d8e1016409e7ea9cb58690da2f64d907a4182ef6d4
SHA512

0bfdace4340ca97f36a868a90a21efd574fe196a54327f3656b8779d350299950898549f115e0c2657adc37a1e068602fc6e3d0a7881126afc48bab1130af1fe
SSDEEP

3072:D1i6xZDYH2IQRH+7MFJSwRujTSRHfU08RZ0Vn41b8Ubpxh5JetoMUMxNTxx:ZXYWT+oFMOUmpi0VnabZbprQo/MxNTf

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://potunulit.org/

http://hutnilior.net/

http://bulimu55t.net/

http://soryytlic4.net/

http://novanosa5org.org/

http://nuljjjnuli.org/

http://tolilolihul.net/

http://somatoka51hub.net/

http://hujukui3.net/

http://bukubuka1.net/

http://golilopaster.org/

http://newzelannd66.org/

http://otriluyttn.org/

rc4.i32

Targets

- Target
  
  file
- Size
  
  267KB
- MD5
  
  97e58a64090cb6f872c94a67eb2bee5c
- SHA1
  
  79a87878bd9c3d2d73f31eb2248ad7aebf70f5e7
- SHA256
  
  185031cb27faf0d5aa70d1d8e1016409e7ea9cb58690da2f64d907a4182ef6d4
- SHA512
  
  0bfdace4340ca97f36a868a90a21efd574fe196a54327f3656b8779d350299950898549f115e0c2657adc37a1e068602fc6e3d0a7881126afc48bab1130af1fe
- SSDEEP
  
  3072:D1i6xZDYH2IQRH+7MFJSwRujTSRHfU08RZ0Vn41b8Ubpxh5JetoMUMxNTxx:ZXYWT+oFMOUmpi0VnabZbprQo/MxNTf
Score

10^/10

smokeloader backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Deletes itself

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2