smokeloader | eb2e5daabfc9bef866c6ac42f0e5d89ce82f3fb7c7bcf60b41a1ed79b51f1317 | Triage

Sharing

General

Target

eb2e5daabfc9bef866c6ac42f0e5d89ce82f3fb7c7bcf60b41a1ed79b51f1317
Size

307KB
Sample

220910-xrhpbaaed3
MD5

9aeb106dd826254e44ce4144532d60ba
SHA1

5e5b089c82a4282baff1ac0fd158b1e3420ee5f8
SHA256

eb2e5daabfc9bef866c6ac42f0e5d89ce82f3fb7c7bcf60b41a1ed79b51f1317
SHA512

7205b7944f5e1be50f256ca58e881debedb1bf3930ff5a2e5f211f449717d2ab0a48ac1ff6c3246899cdaa3ed287d0a4f3842c56875f7394801d2a5689ad16bf
SSDEEP

6144:c7pBjfkIdQZ6Shpj3KKpk3Km9wt+PYE+LScUcOf8Lkw8:c/jc0QZ6El3Npk3Km9u+N+LLOt

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  eb2e5daabfc9bef866c6ac42f0e5d89ce82f3fb7c7bcf60b41a1ed79b51f1317
- Size
  
  307KB
- MD5
  
  9aeb106dd826254e44ce4144532d60ba
- SHA1
  
  5e5b089c82a4282baff1ac0fd158b1e3420ee5f8
- SHA256
  
  eb2e5daabfc9bef866c6ac42f0e5d89ce82f3fb7c7bcf60b41a1ed79b51f1317
- SHA512
  
  7205b7944f5e1be50f256ca58e881debedb1bf3930ff5a2e5f211f449717d2ab0a48ac1ff6c3246899cdaa3ed287d0a4f3842c56875f7394801d2a5689ad16bf
- SSDEEP
  
  6144:c7pBjfkIdQZ6Shpj3KKpk3Km9wt+PYE+LScUcOf8Lkw8:c/jc0QZ6El3Npk3Km9u+N+LLOt
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan