smokeloader | 438c244c741ccdb5e904027ba6879d37584b2ffd427dc0dc6a852f910ba3598f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

103096543f30959753a10629fb595442.exe
Size

275KB
Sample

220908-l18rbabdgn
MD5

103096543f30959753a10629fb595442
SHA1

b596e2b86b4bad3d932668fc75bf48f206819a23
SHA256

438c244c741ccdb5e904027ba6879d37584b2ffd427dc0dc6a852f910ba3598f
SHA512

1cef0ba708d32232aaf26b5b6c2b72b8a69133af9e8bd77c19e9fae738cf7f6f226aa91e022921415f424f558f253bc23044ba8e5f4709b2697cfe122b46b2b3
SSDEEP

6144:CPGgN0L7ODJEe07kfiUwDiw5prmJC1LHc/AKZrnH4iw3enGTi3:VgNwOVtSkfiUwDiw5prd1LHyxH4Ih

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  103096543f30959753a10629fb595442.exe
- Size
  
  275KB
- MD5
  
  103096543f30959753a10629fb595442
- SHA1
  
  b596e2b86b4bad3d932668fc75bf48f206819a23
- SHA256
  
  438c244c741ccdb5e904027ba6879d37584b2ffd427dc0dc6a852f910ba3598f
- SHA512
  
  1cef0ba708d32232aaf26b5b6c2b72b8a69133af9e8bd77c19e9fae738cf7f6f226aa91e022921415f424f558f253bc23044ba8e5f4709b2697cfe122b46b2b3
- SSDEEP
  
  6144:CPGgN0L7ODJEe07kfiUwDiw5prmJC1LHc/AKZrnH4iw3enGTi3:VgNwOVtSkfiUwDiw5prd1LHyxH4Ih
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan