smokeloader | c05a15e9dfab4ce8c4d1808bcfc3a03fa2314c444a795051d44fdf76723b2557 | Triage

Sharing

General

Target

c05a15e9dfab4ce8c4d1808bcfc3a03fa2314c444a795051d44fdf76723b2557
Size

212KB
Sample

240522-synfxsfh87
MD5

f6a033510962a1519cae0ca80de0ed6a
SHA1

71614e6943296eb29c6c24853e341604c144cc10
SHA256

c05a15e9dfab4ce8c4d1808bcfc3a03fa2314c444a795051d44fdf76723b2557
SHA512

2d3d660a83046404d09e24f7bb36017bdd5eaaa40178a046fd58195b4a464652a171cbcb6d56d6c3bb6ac6a643ad9509702f5131825d978f322f34fba2d7dd61
SSDEEP

3072:OsbUgh23jugs0Ovm+cFktP+gRSEwayy9UMGC2XiZKWNnBxOV8HviJlZK4Qje:xUJVNOetgJHyTMH2ygynBxOCv6zK4Q

Score

10^/10

smokeloader sel2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

sel2

Targets

- Target
  
  c05a15e9dfab4ce8c4d1808bcfc3a03fa2314c444a795051d44fdf76723b2557
- Size
  
  212KB
- MD5
  
  f6a033510962a1519cae0ca80de0ed6a
- SHA1
  
  71614e6943296eb29c6c24853e341604c144cc10
- SHA256
  
  c05a15e9dfab4ce8c4d1808bcfc3a03fa2314c444a795051d44fdf76723b2557
- SHA512
  
  2d3d660a83046404d09e24f7bb36017bdd5eaaa40178a046fd58195b4a464652a171cbcb6d56d6c3bb6ac6a643ad9509702f5131825d978f322f34fba2d7dd61
- SSDEEP
  
  3072:OsbUgh23jugs0Ovm+cFktP+gRSEwayy9UMGC2XiZKWNnBxOV8HviJlZK4Qje:xUJVNOetgJHyTMH2ygynBxOCv6zK4Q
Score

10^/10

smokeloader sel2 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloadersel2backdoortrojan

behavioral2

smokeloadersel2backdoortrojan