smokeloader | 16f393ae612e4be6eed7b41f94e933c075eb11acb4e732bf054630de9a6111d6 | Triage

Sharing

General

Target

16f393ae612e4be6eed7b41f94e933c075eb11acb4e732bf054630de9a6111d6
Size

115KB
Sample

241215-r2be4ayqgr
MD5

efcdbd8826e308f4e6e7bd8e2e9e2959
SHA1

6ac933b17d00e4d12139e1f689bdee8541d890ab
SHA256

16f393ae612e4be6eed7b41f94e933c075eb11acb4e732bf054630de9a6111d6
SHA512

b3709a572b32dcebda725cda45655e84079359e7a79e7d9a95973a8ae35557f47983b5ec5248ced29046be5fd5c07517faf418c04abe4a51510ebe3939de0a29
SSDEEP

3072:MYNbeklEdxJhAMRrEDlsJbLBMpqLQCSQx:zNikGLJhT4J0fBMcxSQx

Score

10^/10

smokeloader oct backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

oct

Targets

- Target
  
  b03621290fa3291de14fb80c3f8ca5f35f94c90f662f5f4af53d69e3176e3057.exe
- Size
  
  173KB
- MD5
  
  c87dcd21b0dcb51699a4735ac76ad3de
- SHA1
  
  87d3d0a8aca200fc85ac9646b710141a4098932b
- SHA256
  
  b03621290fa3291de14fb80c3f8ca5f35f94c90f662f5f4af53d69e3176e3057
- SHA512
  
  bba293557550219edcb37d8fc88d366ff53164e6018beb20f4ecc4f72cc58afae0e8573449602b48a89db916b7643dd9b30d5767c37dcf0d8893cd57f9dfa8e8
- SSDEEP
  
  3072:C0lrFhKhmLqTNZZ/DRoz6bisK6XCE/gUumfWTa/7Oj:n7LqTNZF0AisKOVPA
Score

10^/10

smokeloader oct backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderoctbackdoordiscoverytrojan

behavioral2

smokeloaderoctbackdoordiscoverytrojan