smokeloader | 544118698aad3c7c4e88766bcedf75580baa31c2014ee95150c3c0809960dc65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

544118698aad3c7c4e88766bcedf75580baa31c2014ee95150c3c0809960dc65
Size

174KB
Sample

220922-cfpy2ahee3
MD5

c92f98947ad598c135ceb3259cfadf91
SHA1

5519a36b4f51fde95a5b358ab8e7e8c1ddd642d2
SHA256

544118698aad3c7c4e88766bcedf75580baa31c2014ee95150c3c0809960dc65
SHA512

2df91511a5038192eef1882d0b0577e2cd23ac0157dc39d93798931ebf14e983d729139f20afd367fdc804fd5889ffa320689a90428be76a59faf7b1ab98e390
SSDEEP

3072:ShcHL5g57EItFidOArAnorENiVQvzaBNfE/Pk9Dn:QIL5eEItmORorENiVCz0

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  544118698aad3c7c4e88766bcedf75580baa31c2014ee95150c3c0809960dc65
- Size
  
  174KB
- MD5
  
  c92f98947ad598c135ceb3259cfadf91
- SHA1
  
  5519a36b4f51fde95a5b358ab8e7e8c1ddd642d2
- SHA256
  
  544118698aad3c7c4e88766bcedf75580baa31c2014ee95150c3c0809960dc65
- SHA512
  
  2df91511a5038192eef1882d0b0577e2cd23ac0157dc39d93798931ebf14e983d729139f20afd367fdc804fd5889ffa320689a90428be76a59faf7b1ab98e390
- SSDEEP
  
  3072:ShcHL5g57EItFidOArAnorENiVQvzaBNfE/Pk9Dn:QIL5eEItmORorENiVCz0
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan