smokeloader

Resubmissions

09-04-2024 13:53

240409-q7av3sca71 10

09-04-2024 13:53

09-04-2024 13:53

09-04-2024 13:53

02-12-2023 07:46

Sharing

Copy URL

Twitter E-mail

General

Target

caca493c10d47df328c029a270165a21afa50b350ec4f3dd3a6ea72ef2c54823.exe
Size

301KB
Sample

240409-q69ysaca7z
MD5

d976e27be52536c60076fe9a3a646ad1
SHA1

9db98366d212bcd7e3926acb6505c45020604c61
SHA256

caca493c10d47df328c029a270165a21afa50b350ec4f3dd3a6ea72ef2c54823
SHA512

9a44b70bd35a1467c0af014fa13f7ade42b708928511dced8c4ad6f0813e46e9bd5897d476b9ba3c09972bcb757648925453396796f515aaf03ebff651c3985e
SSDEEP

3072:uNg1miw2R2eRVMvRz3jYziACBbFvfy4zoV25kGpYUX35U:qMRnVGDiiJRFMAK

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Version

2022

http://onualituyrs.org/

http://sumagulituyo.org/

http://snukerukeutit.org/

http://lightseinsteniki.org/

http://liuliuoumumy.org/

http://stualialuyastrelia.net/

http://kumbuyartyty.net/

http://criogetikfenbut.org/

http://tonimiuyaytre.org/

http://tyiuiunuewqy.org/

rc4.i32

Targets

- Target
  
  caca493c10d47df328c029a270165a21afa50b350ec4f3dd3a6ea72ef2c54823.exe
- Size
  
  301KB
- MD5
  
  d976e27be52536c60076fe9a3a646ad1
- SHA1
  
  9db98366d212bcd7e3926acb6505c45020604c61
- SHA256
  
  caca493c10d47df328c029a270165a21afa50b350ec4f3dd3a6ea72ef2c54823
- SHA512
  
  9a44b70bd35a1467c0af014fa13f7ade42b708928511dced8c4ad6f0813e46e9bd5897d476b9ba3c09972bcb757648925453396796f515aaf03ebff651c3985e
- SSDEEP
  
  3072:uNg1miw2R2eRVMvRz3jYziACBbFvfy4zoV25kGpYUX35U:qMRnVGDiiJRFMAK
Score

10^/10

smokeloader backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Extracted

Targets

Deletes itself

Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4