Overview

overview

10

Static

static

3

2026-07-08...op.exe

windows10-2004-x64

10

2026-07-08...op.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-08_76273b96f64c9d4236179e935c14ea51_elex_stop
  • Size 354KB
  • Sample260708-lvvmhae13n
  • SHA256 957b83e77af2d520568eaa2af97650bb2c56f85b1d7e7605bb72db4fd6403c98
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
smokeloaderbackdoordiscoverytrojan

Malware Config

Extracted

Family

  • smokeloader

Version

  • 2018

C2

  • http://segodnya.bit/

rc4.i32
rc4.i32

Targets

    • Target
      2026-07-08_76273b96f64c9d4236179e935c14ea51_elex_stop
    • Size 354KB
    • SHA256 957b83e77af2d520568eaa2af97650bb2c56f85b1d7e7605bb72db4fd6403c98
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoordiscoverysmokeloadertrojan

    • Family: SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks