smokeloader

General

Target

bde2ed54f2a666882ae0140c490fbbbd.exe
Size

241KB
Sample

240527-pswzbsde48
MD5

bde2ed54f2a666882ae0140c490fbbbd
SHA1

6c12a8ad19e08f9763647831b7ca4c72c677764e
SHA256

caeb52cc373016afd2187667212e7825c8ee6a028c2176431c69e2296d4177fc
SHA512

f37ffbfb686b769547d5be9a6b18d02dc4c3ee02c77683362c899a84b4d0e24d4dd187249c9066ece6ddf6f4b1c4ac061f7f074e36ad47b464be6db30a1ec19e
SSDEEP

3072:OVXp6jygJkskaZeIoAw4uwLV+57ysi8pm:OVXuygJIPAJuwLjZY

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://dbfhns.in/tmp/index.php

http://guteyr.cc/tmp/index.php

http://greendag.ru/tmp/index.php

http://lobulraualov.in.net/tmp/index.php

rc4.i32

Targets

- Target
  
  bde2ed54f2a666882ae0140c490fbbbd.exe
- Size
  
  241KB
- MD5
  
  bde2ed54f2a666882ae0140c490fbbbd
- SHA1
  
  6c12a8ad19e08f9763647831b7ca4c72c677764e
- SHA256
  
  caeb52cc373016afd2187667212e7825c8ee6a028c2176431c69e2296d4177fc
- SHA512
  
  f37ffbfb686b769547d5be9a6b18d02dc4c3ee02c77683362c899a84b4d0e24d4dd187249c9066ece6ddf6f4b1c4ac061f7f074e36ad47b464be6db30a1ec19e
- SSDEEP
  
  3072:OVXp6jygJkskaZeIoAw4uwLV+57ysi8pm:OVXuygJIPAJuwLjZY
Score

10^/10

smokeloader pub3 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

Deletes itself

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2