smokeloader | 8b33cefab03bdabb7b5e65cfad6e210d021cba11e4f47b69f1730341767ac99f | Triage

Sharing

General

Target

8b33cefab03bdabb7b5e65cfad6e210d021cba11e4f47b69f1730341767ac99f
Size

289KB
Sample

241215-rdkc4aykcn
MD5

0aaf0b08bf147f91ed04557b8e867e22
SHA1

0163ebbbc2a28a50c1b8c4bbd449a1030d56f402
SHA256

8b33cefab03bdabb7b5e65cfad6e210d021cba11e4f47b69f1730341767ac99f
SHA512

36f1879a332572ad5fb1ef61e59a77530c927e8977d79f5e3e7302dfa02363b0361ded96ed82401bace28d477a2d106fe321744c9dbe483d5df7aea24d83ce9c
SSDEEP

3072:vOG+vRWopwSVz+VhsU8RIvrUoByWm0KIVggjcGkNIVqICBJ71D60qo5E:vOoopwSVz861Ovr1yl0p7ITsqdL0ZX

Score

10^/10

smokeloader 0010 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

0010

Targets

- Target
  
  8b33cefab03bdabb7b5e65cfad6e210d021cba11e4f47b69f1730341767ac99f
- Size
  
  289KB
- MD5
  
  0aaf0b08bf147f91ed04557b8e867e22
- SHA1
  
  0163ebbbc2a28a50c1b8c4bbd449a1030d56f402
- SHA256
  
  8b33cefab03bdabb7b5e65cfad6e210d021cba11e4f47b69f1730341767ac99f
- SHA512
  
  36f1879a332572ad5fb1ef61e59a77530c927e8977d79f5e3e7302dfa02363b0361ded96ed82401bace28d477a2d106fe321744c9dbe483d5df7aea24d83ce9c
- SSDEEP
  
  3072:vOG+vRWopwSVz+VhsU8RIvrUoByWm0KIVggjcGkNIVqICBJ71D60qo5E:vOoopwSVz861Ovr1yl0p7ITsqdL0ZX
Score

10^/10

smokeloader 0010 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader0010backdoordiscoverytrojan

behavioral2

smokeloader0010backdoordiscoverytrojan