smokeloader | 1be802b8cdf46793e0cd057a22987dfa64ba87c3430bedfc0d87be5d79cfc229 | Triage

Sharing

General

Target

1be802b8cdf46793e0cd057a22987dfa64ba87c3430bedfc0d87be5d79cfc229
Size

105KB
Sample

241215-rzdgnsxkgv
MD5

ca400722c10f3bb46c0414fc20ac4e30
SHA1

829947a967db947ebc21c085c5c77f39e78e1b93
SHA256

1be802b8cdf46793e0cd057a22987dfa64ba87c3430bedfc0d87be5d79cfc229
SHA512

6cb4b028b3426cd9b8b62e825f47c6f33c1555f8a0ad45d2a999e966f8542503d082f05feffee3b3d5d21524b5cacabc2a9498d314b8bc94966a3ac08b5d7578
SSDEEP

3072:EpkwUD+htQLdY9mwX9vkKA4vBmvkLfA6p6VMGqUDh5QV:CzhtQLy9nXRk2AkLfZ06Gq/V

Score

10^/10

smokeloader oct backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

oct

Targets

- Target
  
  750af2e33ff183e381e853af4fd7a4b16500639a6d109e1600a04f5fba65caed.exe
- Size
  
  153KB
- MD5
  
  c9b8a56ae44d31bf77e38425277cf79f
- SHA1
  
  ef24cff7cc9e4b9fbb6888f7d80d51a91855211e
- SHA256
  
  750af2e33ff183e381e853af4fd7a4b16500639a6d109e1600a04f5fba65caed
- SHA512
  
  084b3131d17c26e751ee6273ad759b9773f3a174d88c26de82c2a712ee8b6b16f3f2163c16252e4dd7d9c6d32c9068d8a622101cc24188de924f35d3e7f02620
- SSDEEP
  
  3072:FYY5LEyU+qcXE55bUfmsLppTR5A69wAEVzTlVwWbqS7:nLEyU+9YWmOppTR6swAE9lVbuK
Score

10^/10

smokeloader oct backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderoctbackdoortrojan

behavioral2

smokeloaderoctbackdoordiscoverytrojan