smokeloader | 9aed10215f4ed90cf59427e52b6e81327f041f8d7e6eabeed37777e4e1c15054 | Triage

Sharing

General

Target

9aed10215f4ed90cf59427e52b6e81327f041f8d7e6eabeed37777e4e1c15054
Size

334KB
Sample

241215-q4y4haxqcm
MD5

94319b1d5b98ccec64f4f150ae7bf0ce
SHA1

7ef8c25390b6fa884ee95e6b6f48c3a6f209db5a
SHA256

9aed10215f4ed90cf59427e52b6e81327f041f8d7e6eabeed37777e4e1c15054
SHA512

102843e3e066d4a3e5bc675d9395938cf8289c825d3201f7eebd5dd04070f78917ab7b4736d694ea9121b6527d8dd5b546c6c1abff628d7daaf221abc2bdf210
SSDEEP

6144:XWQvsKzNqEemeDiVGCYFULgtoh+3oQ9gOU+fzYQ:DsqnBVGCYFULO9g

Score

10^/10

smokeloader oct backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

oct

Targets

- Target
  
  9aed10215f4ed90cf59427e52b6e81327f041f8d7e6eabeed37777e4e1c15054
- Size
  
  334KB
- MD5
  
  94319b1d5b98ccec64f4f150ae7bf0ce
- SHA1
  
  7ef8c25390b6fa884ee95e6b6f48c3a6f209db5a
- SHA256
  
  9aed10215f4ed90cf59427e52b6e81327f041f8d7e6eabeed37777e4e1c15054
- SHA512
  
  102843e3e066d4a3e5bc675d9395938cf8289c825d3201f7eebd5dd04070f78917ab7b4736d694ea9121b6527d8dd5b546c6c1abff628d7daaf221abc2bdf210
- SSDEEP
  
  6144:XWQvsKzNqEemeDiVGCYFULgtoh+3oQ9gOU+fzYQ:DsqnBVGCYFULO9g
Score

10^/10

smokeloader oct backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderoctbackdoortrojan

behavioral2

smokeloaderoctbackdoordiscoverytrojan