smokeloader | 5c0bfb5d5f155f64c1af3cc3cd610fa6e3495ae2c3a8660c96ac9a7fb73eb749 | Triage

Sharing

General

Target

5c0bfb5d5f155f64c1af3cc3cd610fa6e3495ae2c3a8660c96ac9a7fb73eb749
Size

209KB
Sample

240522-pqra3abf8y
MD5

d3f6217f66716d1b253b60365db8aa4c
SHA1

d1e2bf928bce0f5a913b0de81a22272d1f051f5a
SHA256

5c0bfb5d5f155f64c1af3cc3cd610fa6e3495ae2c3a8660c96ac9a7fb73eb749
SHA512

5edaa19f69971e5201ba9f378fb19ba6e5fa481f9dded8eb9c1912db0a6ae87f8dcb75da49b428f1b48617423558a2d7ddc1dedfd8847fdc97189f6f9d25a98e
SSDEEP

3072:VsUFZW1zxw2PfoScast12esP9+mSjiN69BibwQ8dsN7BrV0ncwmKqx7I1YS:lFw1ljPfojast12FFv69BrQPdtKoAY

Score

10^/10

smokeloader sel2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

sel2

Targets

- Target
  
  5c0bfb5d5f155f64c1af3cc3cd610fa6e3495ae2c3a8660c96ac9a7fb73eb749
- Size
  
  209KB
- MD5
  
  d3f6217f66716d1b253b60365db8aa4c
- SHA1
  
  d1e2bf928bce0f5a913b0de81a22272d1f051f5a
- SHA256
  
  5c0bfb5d5f155f64c1af3cc3cd610fa6e3495ae2c3a8660c96ac9a7fb73eb749
- SHA512
  
  5edaa19f69971e5201ba9f378fb19ba6e5fa481f9dded8eb9c1912db0a6ae87f8dcb75da49b428f1b48617423558a2d7ddc1dedfd8847fdc97189f6f9d25a98e
- SSDEEP
  
  3072:VsUFZW1zxw2PfoScast12esP9+mSjiN69BibwQ8dsN7BrV0ncwmKqx7I1YS:lFw1ljPfojast12FFv69BrQPdtKoAY
Score

10^/10

smokeloader sel2 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloadersel2backdoortrojan

behavioral2

smokeloadersel2backdoortrojan