smokeloader

General

Target

e123b3441a91b0efcc426912db745bdf778ac8ec6ddfbb80a4b9c609e2a29fa5
Size

127KB
Sample

240417-r71l6sch69
MD5

2a576946357ac1cb8d088fcba727ae82
SHA1

59b8156832c9b3dea3dd5c46fd06e2391f9c78b2
SHA256

e123b3441a91b0efcc426912db745bdf778ac8ec6ddfbb80a4b9c609e2a29fa5
SHA512

19f462d1595fcd9cb4de6fa8e4d0474fc182fb2d6fe6535f4d40c31573a8deb04f154fa84398aab5d4a342d7db6871f9e8f766a01dd95f00b366a15931e31836
SSDEEP

3072:UKqrd9HnA/sXjCuePdy4MkR/zkSth/WASvfzLR2Ukmw9:Ufd9HnmnueljlkSt4ASzLYm6

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://selebration17io.io/index.php

http://vacantion18ffeu.cc/index.php

http://valarioulinity1.net/index.php

http://buriatiarutuhuob.net/index.php

http://cassiosssionunu.me/index.php

http://sulugilioiu19.net/index.php

http://goodfooggooftool.net/index.php

rc4.i32

Targets

- Target
  
  7371e27487db41883c2177a329fec5c46cb10b24fe771e840ad905fd5ce02469.exe
- Size
  
  203KB
- MD5
  
  eeb46a54701b081e361a3c3854242c9d
- SHA1
  
  e2ce1ed82ff768641bec054598ab4c9ff61bb810
- SHA256
  
  7371e27487db41883c2177a329fec5c46cb10b24fe771e840ad905fd5ce02469
- SHA512
  
  ccca8b6a09cd4f599b39138dcca317fce28739a379291a13e114bb044fa36e79da88ea0777d45ea582e43a760e307c415df6f6a7cb23ef3aec5682e239b814ca
- SSDEEP
  
  3072:6896tZYNXsdUsBGQJiE/1KWvFBA4HF/YPf3z9BHIcfR8889J+cmH:NAUVuzBAmFgPfyP9kco
Score

10^/10

smokeloader backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Deletes itself

Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2