smokeloader | 11212a25a03d681bfb1a7b537b8e066c09d506a30728bd377d47480d8274847a | Triage

Sharing

General

Target

11212a25a03d681bfb1a7b537b8e066c09d506a30728bd377d47480d8274847a
Size

274KB
Sample

220922-ec5anahgf6
MD5

8d84fbaf04aa367f5b193fec39e6c846
SHA1

51e674d175baa2f0dcc70e52642d5a1accec2dfc
SHA256

11212a25a03d681bfb1a7b537b8e066c09d506a30728bd377d47480d8274847a
SHA512

43e73a0c1a533d42f76d31d6b6763e5d9523f65add668b75a34cc7ebb82ccd3ae41688ab5d6478c8213dda108143b31fb2be31317e060c1790e8681cfa019b10
SSDEEP

3072:e85Xy/AkR0X6iYF5I8CS9SodNY8KYq8TX8FVL9g0Ky046SsxkgaBChEpZa9uD6V0:e4yxARZS9LdNoACh9g0XaigavwVfs

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  11212a25a03d681bfb1a7b537b8e066c09d506a30728bd377d47480d8274847a
- Size
  
  274KB
- MD5
  
  8d84fbaf04aa367f5b193fec39e6c846
- SHA1
  
  51e674d175baa2f0dcc70e52642d5a1accec2dfc
- SHA256
  
  11212a25a03d681bfb1a7b537b8e066c09d506a30728bd377d47480d8274847a
- SHA512
  
  43e73a0c1a533d42f76d31d6b6763e5d9523f65add668b75a34cc7ebb82ccd3ae41688ab5d6478c8213dda108143b31fb2be31317e060c1790e8681cfa019b10
- SSDEEP
  
  3072:e85Xy/AkR0X6iYF5I8CS9SodNY8KYq8TX8FVL9g0Ky046SsxkgaBChEpZa9uD6V0:e4yxARZS9LdNoACh9g0XaigavwVfs
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Downloads MZ/PE file
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan