smokeloader

General

Target

075e9290bb9136e9276aecf225c605c778bcc25cc5e87f0bdabdbbbe5f250ef4
Size

239KB
Sample

240105-a43hxsffe2
MD5

a5e0f18e2ca3f658d8a2e17ceb453175
SHA1

cb6ea9f8e537b5bdda6b1af9f99aed2fb7db040f
SHA256

075e9290bb9136e9276aecf225c605c778bcc25cc5e87f0bdabdbbbe5f250ef4
SHA512

f5c032cc1d32b7157c5821af585fcebc2b55d116db9127bebe453defc4d880a426bd6de9ee304f2f85c4d9a8992d0c071af40526e183f127ffcd4ad3e665c450
SSDEEP

3072:k/GLiw/b+mHe4Kq1QKUd0Kur63umnie+3G60xx7VP:k/GLlb+m+4K6UdKrnmZBb

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://sinuptinulium.net/index.php

http://thethuthe3.net/index.php

http://rakutenmakutern.net/index.php

http://sindusyndy.net/index.php

http://lovelyloversbouuyrs.net/index.php

http://stanystarysturu.net/index.php

http://tybytimemunutere.net/index.php

http://opengamerstypepsy.net/index.php

http://lumustruoues.net/index.php

rc4.i32

Targets

- Target
  
  075e9290bb9136e9276aecf225c605c778bcc25cc5e87f0bdabdbbbe5f250ef4
- Size
  
  239KB
- MD5
  
  a5e0f18e2ca3f658d8a2e17ceb453175
- SHA1
  
  cb6ea9f8e537b5bdda6b1af9f99aed2fb7db040f
- SHA256
  
  075e9290bb9136e9276aecf225c605c778bcc25cc5e87f0bdabdbbbe5f250ef4
- SHA512
  
  f5c032cc1d32b7157c5821af585fcebc2b55d116db9127bebe453defc4d880a426bd6de9ee304f2f85c4d9a8992d0c071af40526e183f127ffcd4ad3e665c450
- SSDEEP
  
  3072:k/GLiw/b+mHe4Kq1QKUd0Kur63umnie+3G60xx7VP:k/GLlb+m+4K6UdKrnmZBb
Score

10^/10

smokeloader backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Deletes itself

Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2