smokeloader | 0b8d250ad44674a706d24c54dd625060c6180187a3c919d40a444617f011287f | Triage

Sharing

General

Target

0b8d250ad44674a706d24c54dd625060c6180187a3c919d40a444617f011287f
Size

116KB
Sample

241215-r4rvvsxlhy
MD5

8033d33cc8399cc92236c7f5dcf3fd83
SHA1

8bf10bf348c545b6baa48906ed94785ffc66029c
SHA256

0b8d250ad44674a706d24c54dd625060c6180187a3c919d40a444617f011287f
SHA512

3eb2f074401b66130839e15011a9e174a2d8ce7ee00941937df935d781b1ba2e16e487dc9baa993a7ec7c76cd5c61a0bc2ff6ad88fe4684fe805e714814e2e7a
SSDEEP

3072:4dCN/dzzS6m0NDk7pRs7XEn0yW9FqhAJvyK45Kw8:40jzTkLs7XA0LFqCZ8Kw8

Score

10^/10

smokeloader oct backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

oct

Targets

- Target
  
  86def4439d70e908478819d3bed01ff8f47b1e1ccb2a82181aa2b7bfa51911d0.exe
- Size
  
  174KB
- MD5
  
  b53973447e614cfcde8d03463955162a
- SHA1
  
  daf2284e1ab9cfae6c9fde2ef9452fdd7fbd700c
- SHA256
  
  86def4439d70e908478819d3bed01ff8f47b1e1ccb2a82181aa2b7bfa51911d0
- SHA512
  
  184e2e794726053952c2b91d2051c4ec506d2271d5262e52ee2e54b403a23f969159a067738d30248c2732d90570011602da2ecc77a9a2fa9041ea3f9698a8d6
- SSDEEP
  
  3072:70lOFhfoZ7L7bZtX/AR+gVB0j2avIVHHqtqt8c:A4yL7bZtPN2irIVHGC
Score

10^/10

smokeloader oct backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderoctbackdoordiscoverytrojan

behavioral2

smokeloaderoctbackdoordiscoverytrojan