smokeloader | 01dd5555a4d7072abd26ee0be26bc7da5aa881476ae54f6ff883cb8983248f45 | Triage

Sharing

General

Target

01dd5555a4d7072abd26ee0be26bc7da5aa881476ae54f6ff883cb8983248f45
Size

336KB
Sample

241108-g9e35sxgjj
MD5

6287724c85aeacd69b71d91069b32796
SHA1

9dbfba33f4136dee432886aed9c0025ad9a548f3
SHA256

01dd5555a4d7072abd26ee0be26bc7da5aa881476ae54f6ff883cb8983248f45
SHA512

94a887c6523aed8221339f36da43517435006db18839ea3348c575c84612316efd01d5731c6a6ac522ea625c07da5ef9481ea1a81f46e418bf4269d9267371d3
SSDEEP

3072:802XmvR5yOYOkze2FDIIEclOoGDS5DL1oi0UShkNZhwGN/AqdyIgThFMvjugzHsU:6yPkcIrBDL1/09GN4qdyImkjugjaIP

Score

10^/10

smokeloader sel9 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

sel9

Targets

- Target
  
  01dd5555a4d7072abd26ee0be26bc7da5aa881476ae54f6ff883cb8983248f45
- Size
  
  336KB
- MD5
  
  6287724c85aeacd69b71d91069b32796
- SHA1
  
  9dbfba33f4136dee432886aed9c0025ad9a548f3
- SHA256
  
  01dd5555a4d7072abd26ee0be26bc7da5aa881476ae54f6ff883cb8983248f45
- SHA512
  
  94a887c6523aed8221339f36da43517435006db18839ea3348c575c84612316efd01d5731c6a6ac522ea625c07da5ef9481ea1a81f46e418bf4269d9267371d3
- SSDEEP
  
  3072:802XmvR5yOYOkze2FDIIEclOoGDS5DL1oi0UShkNZhwGN/AqdyIgThFMvjugzHsU:6yPkcIrBDL1/09GN4qdyImkjugjaIP
Score

10^/10

smokeloader sel9 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloadersel9backdoordiscoverytrojan

behavioral2

smokeloadersel9backdoordiscoverytrojan