smokeloader | 65fe49e4012cfa3da597227d75d6fe4db305eee6c0a0d09bc9f8ad99a1f8bea3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65fe49e4012cfa3da597227d75d6fe4db305eee6c0a0d09bc9f8ad99a1f8bea3
Size

273KB
Sample

220922-dwzc3shgb7
MD5

6b16ef584f54959051af9dc2dc987ad9
SHA1

1f0892bd729765fa788315e2664ffff9561ff26e
SHA256

65fe49e4012cfa3da597227d75d6fe4db305eee6c0a0d09bc9f8ad99a1f8bea3
SHA512

5a90a48f643800a5fc6e7be0e6a9f883d5937c8c1a99d15e097d3917e0703eca8cdfb4f73f0aa3be56a44bd7893d736e406610b9d9205e1930a355ae4bcd5ea8
SSDEEP

3072:IM5XnhLHdEU3F5LO1DqTZfN+l5dn9k/eg0KAG12csxkgaBChEpZa9uD6VdyhktRJ:IonVKUjOiH+0mg0PyoigavwVf

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  65fe49e4012cfa3da597227d75d6fe4db305eee6c0a0d09bc9f8ad99a1f8bea3
- Size
  
  273KB
- MD5
  
  6b16ef584f54959051af9dc2dc987ad9
- SHA1
  
  1f0892bd729765fa788315e2664ffff9561ff26e
- SHA256
  
  65fe49e4012cfa3da597227d75d6fe4db305eee6c0a0d09bc9f8ad99a1f8bea3
- SHA512
  
  5a90a48f643800a5fc6e7be0e6a9f883d5937c8c1a99d15e097d3917e0703eca8cdfb4f73f0aa3be56a44bd7893d736e406610b9d9205e1930a355ae4bcd5ea8
- SSDEEP
  
  3072:IM5XnhLHdEU3F5LO1DqTZfN+l5dn9k/eg0KAG12csxkgaBChEpZa9uD6VdyhktRJ:IonVKUjOiH+0mg0PyoigavwVf
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan