smokeloader | 90264337180a177a7997aebadb37b257e849d1392994582599f0ec83fd68ccfe | Triage

Sharing

General

Target

90264337180a177a7997aebadb37b257e849d1392994582599f0ec83fd68ccfe
Size

216KB
Sample

241105-j5626szpgn
MD5

e584b2d98de2941fa127aca51972f1a9
SHA1

627621a832dcb0a657e525cd6ee388610930b12c
SHA256

90264337180a177a7997aebadb37b257e849d1392994582599f0ec83fd68ccfe
SHA512

7adafe6e9074562ac083476a480eb94ad6e9d50b8b796eaa676d4880e63e3bb32634083b80831a24a303bf9e6829482958cbe8166d1cef68dea30d15f217a04e
SSDEEP

6144:DXEyPY6g5LLNGMNXedJrHDNBesNEnsBrwA:DXT5+vYMsJ3KsmnK

Score

10^/10

smokeloader oct backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

oct

Targets

- Target
  
  90264337180a177a7997aebadb37b257e849d1392994582599f0ec83fd68ccfe
- Size
  
  216KB
- MD5
  
  e584b2d98de2941fa127aca51972f1a9
- SHA1
  
  627621a832dcb0a657e525cd6ee388610930b12c
- SHA256
  
  90264337180a177a7997aebadb37b257e849d1392994582599f0ec83fd68ccfe
- SHA512
  
  7adafe6e9074562ac083476a480eb94ad6e9d50b8b796eaa676d4880e63e3bb32634083b80831a24a303bf9e6829482958cbe8166d1cef68dea30d15f217a04e
- SSDEEP
  
  6144:DXEyPY6g5LLNGMNXedJrHDNBesNEnsBrwA:DXT5+vYMsJ3KsmnK
Score

10^/10

smokeloader oct backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderoctbackdoordiscoverytrojan

behavioral2

smokeloaderoctbackdoordiscoverytrojan