smokeloader | c7c187a6c1d1ce76d38bdde6b46fd9def61ecc0369f429762246b4a9ce68b8af | Triage

Sharing

General

Target

c7c187a6c1d1ce76d38bdde6b46fd9def61ecc0369f429762246b4a9ce68b8af
Size

317KB
Sample

241215-rde4dawnhv
MD5

8a2cab95b036d182d6596ec22cf57bf3
SHA1

004c5b90076d3d25c8f462d038503a91f658bf84
SHA256

c7c187a6c1d1ce76d38bdde6b46fd9def61ecc0369f429762246b4a9ce68b8af
SHA512

3b44e1c116fa007654651d35e19b1976d384e3d00cd5cca9c82a39dfb4dbc8b9d8f8a0a92de3d86765f51027df075b521b55672603232cc85d5d9e7585c967a7
SSDEEP

3072:S5SNPqegctJkuME0HJosVJkdoNzNN3SpsxkgaBChUpZa9uD6Vdyhku:WxctJBME0HJXVJkMp9Suiga3wVfu

Score

10^/10

smokeloader 0009 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

0009

Targets

- Target
  
  c7c187a6c1d1ce76d38bdde6b46fd9def61ecc0369f429762246b4a9ce68b8af
- Size
  
  317KB
- MD5
  
  8a2cab95b036d182d6596ec22cf57bf3
- SHA1
  
  004c5b90076d3d25c8f462d038503a91f658bf84
- SHA256
  
  c7c187a6c1d1ce76d38bdde6b46fd9def61ecc0369f429762246b4a9ce68b8af
- SHA512
  
  3b44e1c116fa007654651d35e19b1976d384e3d00cd5cca9c82a39dfb4dbc8b9d8f8a0a92de3d86765f51027df075b521b55672603232cc85d5d9e7585c967a7
- SSDEEP
  
  3072:S5SNPqegctJkuME0HJosVJkdoNzNN3SpsxkgaBChUpZa9uD6Vdyhku:WxctJBME0HJXVJkMp9Suiga3wVfu
Score

10^/10

smokeloader 0009 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader0009backdoordiscoverytrojan

behavioral2

smokeloader0009backdoordiscoverytrojan