smokeloader

General

Target

27e744e444050f7280b25b57a7d228d186e0b53548c24ae23f16e15bec634ea8
Size

147KB
Sample

240417-r6de9aec2t
MD5

8a4fdfdafb8a33aa3bc8cf765cf4fdb7
SHA1

c81525fc09b3d19a72b7b4ee21481271acb90b1a
SHA256

27e744e444050f7280b25b57a7d228d186e0b53548c24ae23f16e15bec634ea8
SHA512

2e9b1b107b3f87139240e4e19eea80056c1736e9a785908c4c67f1f15a40dd32b15fe6c0fe2360fe5a6ad14892c4abcc7ed359d86a9687e1533fb2552754bcd8
SSDEEP

3072:+SIn+OWeiLKH0lhefC/eDB9OiqqJ+//R5LCYMQyxaUn6AWI89y3:+jn+9LKHy0fCGCingJwaDby3

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://selebration17io.io/index.php

http://vacantion18ffeu.cc/index.php

http://valarioulinity1.net/index.php

http://buriatiarutuhuob.net/index.php

http://cassiosssionunu.me/index.php

http://sulugilioiu19.net/index.php

http://goodfooggooftool.net/index.php

rc4.i32

Targets

- Target
  
  b4d9bc9471648ef8d072e524b4c6e3f5793e29b663bc85a9809912e7fad320c2.exe
- Size
  
  234KB
- MD5
  
  ed0c899ce676b4f803a842b58805b16e
- SHA1
  
  6de3ccba1d1cfa0a9825787ce860201367980b43
- SHA256
  
  b4d9bc9471648ef8d072e524b4c6e3f5793e29b663bc85a9809912e7fad320c2
- SHA512
  
  fd997ec5291062aea0c473dbdfe412c150296fc7794b8b9a77d3097726e2a6abc2af87d9d9eb1c12b2cf7f3420eaab49a85b387e8fe103381e310d82969eedf9
- SSDEEP
  
  3072:MPh8al1TPcpuOmohvNAJIP1jkxKJoMazKzu2Zoib2LhYt2QeEN4I9jXO9ZJwVQk:Oh11EjhvNPhJo/ezTbrWESIxOTF
Score

10^/10

smokeloader backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Deletes itself

Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2