smokeloader | cd5ea97075885b74547285f69cfc20191c13f669cec2b9b1274674260fd228af | Triage

Sharing

General

Target

file.exe
Size

274KB
Sample

220919-veh37shda8
MD5

04c17a46451549dc481f45b161322744
SHA1

6a69b46336de2bbdce5d58396a5f41adc6747ab3
SHA256

cd5ea97075885b74547285f69cfc20191c13f669cec2b9b1274674260fd228af
SHA512

84fa7deb9b08488772f976048b7c83537c34cad75cde1cede3c2a4ff5226248c702e6b50a418fc0bac7ac6f05f995c6f434e3e58ba43196dc86c4d6b8e57e029
SSDEEP

6144:WhbRsoLTd9Vp54V/0VI7zi0cfmxOGigavwVfMC:WhbRffd9VYV/0VIbcfmEbM

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  274KB
- MD5
  
  04c17a46451549dc481f45b161322744
- SHA1
  
  6a69b46336de2bbdce5d58396a5f41adc6747ab3
- SHA256
  
  cd5ea97075885b74547285f69cfc20191c13f669cec2b9b1274674260fd228af
- SHA512
  
  84fa7deb9b08488772f976048b7c83537c34cad75cde1cede3c2a4ff5226248c702e6b50a418fc0bac7ac6f05f995c6f434e3e58ba43196dc86c4d6b8e57e029
- SSDEEP
  
  6144:WhbRsoLTd9Vp54V/0VI7zi0cfmxOGigavwVfMC:WhbRffd9VYV/0VIbcfmEbM
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan