smokeloader | 49bce5c64ecd75162aef2a9b882b55bb3524a731d5853106cbf191acf946ac47 | Triage

Sharing

General

Target

4b59735ef6a2a1b87425256235dc923a
Size

371KB
Sample

241111-lwfvqswrdv
MD5

4b59735ef6a2a1b87425256235dc923a
SHA1

4361a3409a9c15aa93f17ae2406fc4b21b73cdea
SHA256

49bce5c64ecd75162aef2a9b882b55bb3524a731d5853106cbf191acf946ac47
SHA512

90a1941299912e40923270de145b60b25c5c416f1aba9f48efb86e376bc09807f49859231eab3043ab1726b6b88872ac4fbba3bc275ac5d2c01117cd354a3fe9
SSDEEP

6144:fDoOyMjLQyI0FrvVhQU3j8h1+BDHcM6++ra9n+:fDow8yILUz8h1aDI+69

Score

10^/10

smokeloader oct backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

oct

Targets

- Target
  
  4b59735ef6a2a1b87425256235dc923a
- Size
  
  371KB
- MD5
  
  4b59735ef6a2a1b87425256235dc923a
- SHA1
  
  4361a3409a9c15aa93f17ae2406fc4b21b73cdea
- SHA256
  
  49bce5c64ecd75162aef2a9b882b55bb3524a731d5853106cbf191acf946ac47
- SHA512
  
  90a1941299912e40923270de145b60b25c5c416f1aba9f48efb86e376bc09807f49859231eab3043ab1726b6b88872ac4fbba3bc275ac5d2c01117cd354a3fe9
- SSDEEP
  
  6144:fDoOyMjLQyI0FrvVhQU3j8h1+BDHcM6++ra9n+:fDow8yILUz8h1aDI+69
Score

10^/10

smokeloader oct backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderoctbackdoordiscoverytrojan

behavioral2

smokeloaderoctbackdoordiscoverytrojan