smokeloader | e9ea778b79e035d007fc5565ac1b4fea4c55502fd822038221bd177b41b8a1c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file
Size

154KB
Sample

220926-qp2abaahd9
MD5

97ac2b935a69b5d7c296c073227490a2
SHA1

13a61edd4c0ba19c06e50f0c2034ab899cd2b841
SHA256

e9ea778b79e035d007fc5565ac1b4fea4c55502fd822038221bd177b41b8a1c2
SHA512

41739f429d69ccdf309ea9e0c4480863fbcb25a4303105e92b517f700b39f79404f76101bba2a57f1e89998a63b431b242bbde97c2993f176be6cff7779f16a9
SSDEEP

3072:urP6TF5te9YxLRLOQgGb0mrSwgC1BlTy95B:bbdtrKCN2

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file
- Size
  
  154KB
- MD5
  
  97ac2b935a69b5d7c296c073227490a2
- SHA1
  
  13a61edd4c0ba19c06e50f0c2034ab899cd2b841
- SHA256
  
  e9ea778b79e035d007fc5565ac1b4fea4c55502fd822038221bd177b41b8a1c2
- SHA512
  
  41739f429d69ccdf309ea9e0c4480863fbcb25a4303105e92b517f700b39f79404f76101bba2a57f1e89998a63b431b242bbde97c2993f176be6cff7779f16a9
- SSDEEP
  
  3072:urP6TF5te9YxLRLOQgGb0mrSwgC1BlTy95B:bbdtrKCN2
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan