smokeloader | 3579d8b3c35507d8097f9bbb66db0e2b3117f39f8258a6f9103d53cb7fab47d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3579d8b3c35507d8097f9bbb66db0e2b3117f39f8258a6f9103d53cb7fab47d9
Size

200KB
Sample

220924-enlyfsaed9
MD5

33ff95cd358e83db7d5333f39c5311f9
SHA1

bbf4eac70a253bb899dc10e8a619a28348dd4cf1
SHA256

3579d8b3c35507d8097f9bbb66db0e2b3117f39f8258a6f9103d53cb7fab47d9
SHA512

0bb484dfb230f9a1d1d601f8221415bd10ef46d5945e74e27d0223d36805b848e0335e29534bdbc692e9d687ca2888ab1bc3ff59463a54fc8b16d1791f269ef5
SSDEEP

3072:zwh/3CQMLltiZkTe6H85RxWTNHAJmZ15+cOyGy6uzt6KF5yeBbOH/Pkj4x:zoK/LlTvyIHAJmZ/Ojuzt6Ku

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  3579d8b3c35507d8097f9bbb66db0e2b3117f39f8258a6f9103d53cb7fab47d9
- Size
  
  200KB
- MD5
  
  33ff95cd358e83db7d5333f39c5311f9
- SHA1
  
  bbf4eac70a253bb899dc10e8a619a28348dd4cf1
- SHA256
  
  3579d8b3c35507d8097f9bbb66db0e2b3117f39f8258a6f9103d53cb7fab47d9
- SHA512
  
  0bb484dfb230f9a1d1d601f8221415bd10ef46d5945e74e27d0223d36805b848e0335e29534bdbc692e9d687ca2888ab1bc3ff59463a54fc8b16d1791f269ef5
- SSDEEP
  
  3072:zwh/3CQMLltiZkTe6H85RxWTNHAJmZ15+cOyGy6uzt6KF5yeBbOH/Pkj4x:zoK/LlTvyIHAJmZ/Ojuzt6Ku
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan