smokeloader | 5f18aa7aecd7a9b415b00aabe6ca90fd91b94e6adc23ee3da6e8ae8ba656c9f1 | Triage

Sharing

General

Target

5f18aa7aecd7a9b415b00aabe6ca90fd91b94e6adc23ee3da6e8ae8ba656c9f1
Size

169KB
Sample

220923-kb1tqsgbh7
MD5

5702d89b3ac7e0f309af5811ede6bfee
SHA1

6ec4dd01b6b1680b1747c28211910530ea619ca4
SHA256

5f18aa7aecd7a9b415b00aabe6ca90fd91b94e6adc23ee3da6e8ae8ba656c9f1
SHA512

ef66e206816fa36ad6860da2f16b532ab700b5d2e9aed4a21e2080c162bd6fddc5f9afafe3daf850b8eca4993b402daaac81fde64339dad8dc4174acbaa418bd
SSDEEP

3072:4SJLxN5k9n88RmfU7rC0F3poJBd2Lz9/PkW4n:PLxk9ngfU7rCI3Wo

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  5f18aa7aecd7a9b415b00aabe6ca90fd91b94e6adc23ee3da6e8ae8ba656c9f1
- Size
  
  169KB
- MD5
  
  5702d89b3ac7e0f309af5811ede6bfee
- SHA1
  
  6ec4dd01b6b1680b1747c28211910530ea619ca4
- SHA256
  
  5f18aa7aecd7a9b415b00aabe6ca90fd91b94e6adc23ee3da6e8ae8ba656c9f1
- SHA512
  
  ef66e206816fa36ad6860da2f16b532ab700b5d2e9aed4a21e2080c162bd6fddc5f9afafe3daf850b8eca4993b402daaac81fde64339dad8dc4174acbaa418bd
- SSDEEP
  
  3072:4SJLxN5k9n88RmfU7rC0F3poJBd2Lz9/PkW4n:PLxk9ngfU7rCI3Wo
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan