smokeloader | 4cfa3bd756957854201eacdf8cb8ba3c85e8c78babf0e3e5d87ee50b5cf8d514 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cfa3bd756957854201eacdf8cb8ba3c85e8c78babf0e3e5d87ee50b5cf8d514
Size

208KB
Sample

220907-bc9ctsagc9
MD5

507c9c97d045eece6ed79201de911d45
SHA1

4801e88902b47b88426b83093b0b2885643aa78e
SHA256

4cfa3bd756957854201eacdf8cb8ba3c85e8c78babf0e3e5d87ee50b5cf8d514
SHA512

63a975bd2251a722ee3ba071d3b5d1710f22e1bd4a2a3755914c15e96c2e45cb5538f51f98f915d602042f7c4ace8e642680b2485e02f640358753614565cab8
SSDEEP

3072:CB2ZTp5R+BCUpDYkvuP16LsjTSw3y9ArRv4K+:3eCslvuP15TSwxr

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  4cfa3bd756957854201eacdf8cb8ba3c85e8c78babf0e3e5d87ee50b5cf8d514
- Size
  
  208KB
- MD5
  
  507c9c97d045eece6ed79201de911d45
- SHA1
  
  4801e88902b47b88426b83093b0b2885643aa78e
- SHA256
  
  4cfa3bd756957854201eacdf8cb8ba3c85e8c78babf0e3e5d87ee50b5cf8d514
- SHA512
  
  63a975bd2251a722ee3ba071d3b5d1710f22e1bd4a2a3755914c15e96c2e45cb5538f51f98f915d602042f7c4ace8e642680b2485e02f640358753614565cab8
- SSDEEP
  
  3072:CB2ZTp5R+BCUpDYkvuP16LsjTSw3y9ArRv4K+:3eCslvuP15TSwxr
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan