smokeloader | 8d5463d6b5392687c885cea7478f814e0970d6a8a5e554aa72804535c48bd514 | Triage

Sharing

General

Target

05437bc0c9af40a6f2e43af190bb1364
Size

105KB
Sample

241109-1hb2yssjey
MD5

05437bc0c9af40a6f2e43af190bb1364
SHA1

f9d109c876da136d77729116aa4cb9074bfd1eaf
SHA256

8d5463d6b5392687c885cea7478f814e0970d6a8a5e554aa72804535c48bd514
SHA512

e9475f8788b5f9f5b28da6e4b66edbd37b88a7762e164c3d432e44750ff51062715f1499abbb8232675bc52f8771423deffe8bbabcd737d2d12daf99d37684ed
SSDEEP

1536:UxghTGzg2FJUy2jbbr0OT3IKGKI0b4+pn8JUtDFD29VDHaOppg6mql8ZRkl6agk4:Ua4kO6bbrxT3vGKJxp8Jpb7a0UqODDAa

Score

10^/10

smokeloader oct backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

oct

Targets

- Target
  
  750af2e33ff183e381e853af4fd7a4b16500639a6d109e1600a04f5fba65caed.exe
- Size
  
  153KB
- MD5
  
  c9b8a56ae44d31bf77e38425277cf79f
- SHA1
  
  ef24cff7cc9e4b9fbb6888f7d80d51a91855211e
- SHA256
  
  750af2e33ff183e381e853af4fd7a4b16500639a6d109e1600a04f5fba65caed
- SHA512
  
  084b3131d17c26e751ee6273ad759b9773f3a174d88c26de82c2a712ee8b6b16f3f2163c16252e4dd7d9c6d32c9068d8a622101cc24188de924f35d3e7f02620
- SSDEEP
  
  3072:FYY5LEyU+qcXE55bUfmsLppTR5A69wAEVzTlVwWbqS7:nLEyU+9YWmOppTR6swAE9lVbuK
Score

10^/10

smokeloader oct backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderoctbackdoortrojan

behavioral2

smokeloaderoctbackdoordiscoverytrojan