smokeloader | 0176b0e43ef3b5fa39b8732ff8a632f4a965e8c8671cac4d8c71524b3f3ffc63 | Triage

Sharing

General

Target

0176b0e43ef3b5fa39b8732ff8a632f4a965e8c8671cac4d8c71524b3f3ffc63
Size

289KB
Sample

241215-qy8ezsvrht
MD5

e6770ace7e8cbc5e41c29752e1217d22
SHA1

34fc0ef90856235b8eacab521ee45ac1a0dc278b
SHA256

0176b0e43ef3b5fa39b8732ff8a632f4a965e8c8671cac4d8c71524b3f3ffc63
SHA512

3d7bd0a20e0f4bbf8c29542c979527d12aa5d654986b53c234fab60b98a12bf745b5a706a004bf1299e3e6e988c388d222480b06fbc104d0921001608a5b8f05
SSDEEP

6144:Cy2tLVqCtQv3szVxptfGP0zuxgmnigabwVf:Cy2thqCtQv3s5xDfJ+gmi

Score

10^/10

smokeloader slov backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

slov

Targets

- Target
  
  0176b0e43ef3b5fa39b8732ff8a632f4a965e8c8671cac4d8c71524b3f3ffc63
- Size
  
  289KB
- MD5
  
  e6770ace7e8cbc5e41c29752e1217d22
- SHA1
  
  34fc0ef90856235b8eacab521ee45ac1a0dc278b
- SHA256
  
  0176b0e43ef3b5fa39b8732ff8a632f4a965e8c8671cac4d8c71524b3f3ffc63
- SHA512
  
  3d7bd0a20e0f4bbf8c29542c979527d12aa5d654986b53c234fab60b98a12bf745b5a706a004bf1299e3e6e988c388d222480b06fbc104d0921001608a5b8f05
- SSDEEP
  
  6144:Cy2tLVqCtQv3szVxptfGP0zuxgmnigabwVf:Cy2thqCtQv3s5xDfJ+gmi
Score

10^/10

smokeloader slov backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderslovbackdoordiscoverytrojan

behavioral2

smokeloaderslovbackdoordiscoverytrojan