smokeloader | e5c276cc8d54536b28f05b777f108b336d9f78f1671946bdc24c89a318440589 | Triage

Sharing

General

Target

1255496e34ab9f82c4cf9267b0b023362849c29d
Size

323KB
Sample

241107-qeh1zsvpgq
MD5

bf7a142abf83963246d519d381d0c223
SHA1

1255496e34ab9f82c4cf9267b0b023362849c29d
SHA256

e5c276cc8d54536b28f05b777f108b336d9f78f1671946bdc24c89a318440589
SHA512

4563f023f55de306dc4bb5c04565accf1a7460d1a6c3c083f7adc291ff9bc2cad24a8813300a60aeadb4884537e201970513ed092223f3f9dcefb9fe5043b631
SSDEEP

6144:c8fnvKs7oT6oBaDP5pf8qZ50WP7ITsq4:c8PvK2odYXn0e75

Score

10^/10

smokeloader oct backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

oct

Targets

- Target
  
  1255496e34ab9f82c4cf9267b0b023362849c29d
- Size
  
  323KB
- MD5
  
  bf7a142abf83963246d519d381d0c223
- SHA1
  
  1255496e34ab9f82c4cf9267b0b023362849c29d
- SHA256
  
  e5c276cc8d54536b28f05b777f108b336d9f78f1671946bdc24c89a318440589
- SHA512
  
  4563f023f55de306dc4bb5c04565accf1a7460d1a6c3c083f7adc291ff9bc2cad24a8813300a60aeadb4884537e201970513ed092223f3f9dcefb9fe5043b631
- SSDEEP
  
  6144:c8fnvKs7oT6oBaDP5pf8qZ50WP7ITsq4:c8PvK2odYXn0e75
Score

10^/10

smokeloader oct backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderoctbackdoortrojan

behavioral2

smokeloaderoctbackdoordiscoverytrojan