smokeloader

General

Target

ec3d1df7a484c9ee8082af35b8958dabc105efabacc5428ea177c2622b7b7e51
Size

161KB
Sample

240417-q9l15aag56
MD5

71aebbd03b897a642005b56c394ccc55
SHA1

832037930610626ad3adbdfe04655b8dcc6544d8
SHA256

ec3d1df7a484c9ee8082af35b8958dabc105efabacc5428ea177c2622b7b7e51
SHA512

f9eb31e34b35e5468e2999b4faf62bdee1277972590ea6072b9e52811335163308ea54317b844d7d166c2fe95c0bab90d5b8c14cfb880ecfd626a909e82f4c68
SSDEEP

3072:+5V0130wML+l7C7M5+LrJILrg0dZQxD5SqjJ0Tqh5z3NIETR3uUsac7:+n01vML+bGrGXZQDSqjJW8R3V4

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://selebration17io.io/index.php

http://vacantion18ffeu.cc/index.php

http://valarioulinity1.net/index.php

http://buriatiarutuhuob.net/index.php

http://cassiosssionunu.me/index.php

http://sulugilioiu19.net/index.php

http://goodfooggooftool.net/index.php

rc4.i32

Targets

- Target
  
  5d757b69732066527c841f7007486942fe0f339770121327053917bf6c05d7c5.exe
- Size
  
  308KB
- MD5
  
  97c6a1b4f0d2a75019cdd39c509ad040
- SHA1
  
  738df6dc3fc1ba4e136fdb76b1f7a225c7b035b0
- SHA256
  
  5d757b69732066527c841f7007486942fe0f339770121327053917bf6c05d7c5
- SHA512
  
  f8d24851a6f6e1bb8f42d6d5accd3fc0ace97be0472c18aef46a1b6523871f8ceef4c7580107381247958eb38f5f240bb4cd7648212e73f9194883b4f5dd9a27
- SSDEEP
  
  3072:1T/zZ9SX0Cz20Nq+BcKiEXKuxgeG+Y58h4s39/Rt0qn0NwucILEIiu/1BTYn5:Fyka80/ra+OsN/Rt0qucILEIim1w
Score

10^/10

smokeloader backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Deletes itself

Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2