smokeloader

General

Target

bef19046886d0a76f0f8fbe8ca5043905884a7948fc3d535a361a4e210c9a2e3
Size

176KB
Sample

240417-r85yaaed6y
MD5

c107750cd006df9009f701c576fd3480
SHA1

63046546c462792daa0ce85c32d4dad0788bff06
SHA256

bef19046886d0a76f0f8fbe8ca5043905884a7948fc3d535a361a4e210c9a2e3
SHA512

5a7e9baaf192f76561ca4a47767a5ed97543cc341efb84ffc651e27e2ebf68a2cb3414b2e504fca9b828fe9bb1fa65e4ea64be1a4a5b957d14aaa0d57dfcc321
SSDEEP

3072:NBO8lLex+sB/iZ2Et47ZzqWq9VHEcvwBgDSrsT+DwQctFvGiepvtij9OMZl4ssQC:NB7k+oi8Et47Zzq/VHEcug0sT+Dwttha

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://selebration17io.io/index.php

http://vacantion18ffeu.cc/index.php

http://valarioulinity1.net/index.php

http://buriatiarutuhuob.net/index.php

http://cassiosssionunu.me/index.php

http://sulugilioiu19.net/index.php

http://goodfooggooftool.net/index.php

rc4.i32

Targets

- Target
  
  581412f08e3333ebe7a4661f982106b1e395d3c8f384107df71db4768faec0c8.exe
- Size
  
  312KB
- MD5
  
  5a284c7f753ae16b6d2739e195ab6633
- SHA1
  
  7198366d058a0816fb145e09ee34034d079fccf2
- SHA256
  
  581412f08e3333ebe7a4661f982106b1e395d3c8f384107df71db4768faec0c8
- SHA512
  
  5a376e1fc3435087c6827dd3fe3e6eaddd1f617d3beaf1e0dbd9583399d6d9b299ca9f60375c0e2398970eef04fc9ee14ba84b669422d57851caad7f083f4813
- SSDEEP
  
  3072:9j8aOxWKuLtl+dJwqdN+8WZxmw9JCzW2Y/7ZYjY5n0HQGsR1hidO:96xELH+dlY8AwCkLY/tYe0HQlji
Score

10^/10

smokeloader backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Deletes itself

Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2