smokeloader | 7f5905c0739fb02697b5238d0aa769b4bca7dbe778f47d6bbf3c2fca152806e5 | Triage

Sharing

General

Target

7f5905c0739fb02697b5238d0aa769b4bca7dbe778f47d6bbf3c2fca152806e5
Size

114KB
Sample

241110-pxlzxsxanj
MD5

150810f2b8def14983a4ef7d74bd766e
SHA1

ecc33b5f0cbbd076f8a4fa15e1cbe5054c679cae
SHA256

7f5905c0739fb02697b5238d0aa769b4bca7dbe778f47d6bbf3c2fca152806e5
SHA512

7934e5c39f6d3a3e8fde9aa91917d9634039520311a5f549a641f360a9b07a00415d7d61306d71bbad00a80c3861df243d46ae59b0f5a70cc23f7ba6a49964c0
SSDEEP

3072:o1PWd6/qKp/CLPimFJ0iIYYgvLVOkm+ZaJ4sCv:WPWdEpsPdJFIKckm+ZsK

Score

10^/10

smokeloader oct backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

oct

Targets

- Target
  
  fd23182c7a2c38c46d831d48a03b7a4c9385c04f89032b667d18dc43e144f4f4.exe
- Size
  
  173KB
- MD5
  
  651f1f3cc80372a6369b6450ede09538
- SHA1
  
  b9975e84a0b75115e7216ed65dd15046e0b83a7c
- SHA256
  
  fd23182c7a2c38c46d831d48a03b7a4c9385c04f89032b667d18dc43e144f4f4
- SHA512
  
  25ac038afd98911e2c034513e69074985b41c396a591cf8f0f9dbe4f94323a8268385dea5949259fcb3b3a2d34111208e1021b549bc8d15fdf00fc6f90394c10
- SSDEEP
  
  3072:e0lZFhZiWLGB5NAV/ARAs4+p8mp0TaN0eh1J+vE1VdO:bNLGB5NA5LOpJeTSh1IKV
Score

10^/10

smokeloader oct backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderoctbackdoordiscoverytrojan

behavioral2

smokeloaderoctbackdoordiscoverytrojan