smokeloader | ac884e41e71e09961c2ae11b5300e7650476ab473207d03dce8862e6b3f9a753 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

200KB
Sample

220924-a2b8ysacc2
MD5

31cfca4d26336f268becdb2e057bca38
SHA1

5dc057c028d45d7b3445bc54680a61b5fcbfa6a0
SHA256

ac884e41e71e09961c2ae11b5300e7650476ab473207d03dce8862e6b3f9a753
SHA512

4d7d392d9b4b6080044f5588054a4c2cb504a2ef2ed3a445090889139970683c2263a6f820c7b861701f70f64f2bccba75864736c6329be0a93cdeada88ed449
SSDEEP

3072:bw2YiEYLP/cXQ85oCO7gY7sRg7Soug6NWJmKWfBFHnqg4WA/Pkj4x:bFvLsXq0YIILveWcKW6g4W

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  200KB
- MD5
  
  31cfca4d26336f268becdb2e057bca38
- SHA1
  
  5dc057c028d45d7b3445bc54680a61b5fcbfa6a0
- SHA256
  
  ac884e41e71e09961c2ae11b5300e7650476ab473207d03dce8862e6b3f9a753
- SHA512
  
  4d7d392d9b4b6080044f5588054a4c2cb504a2ef2ed3a445090889139970683c2263a6f820c7b861701f70f64f2bccba75864736c6329be0a93cdeada88ed449
- SSDEEP
  
  3072:bw2YiEYLP/cXQ85oCO7gY7sRg7Soug6NWJmKWfBFHnqg4WA/Pkj4x:bFvLsXq0YIILveWcKW6g4W
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan