smokeloader | aa052b9f9248df32c316df1025d6dac36cca734ab7fd9edeb1fe5d9ac3833a02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

153KB
Sample

220926-rlpmsabaf4
MD5

e76782424eec65609faa37012ab94e09
SHA1

080eb5f7f2b3bcf4a281d05711e1b962a163bc44
SHA256

aa052b9f9248df32c316df1025d6dac36cca734ab7fd9edeb1fe5d9ac3833a02
SHA512

4bbedab61ad7a6ad0cc5bc76b995ec3eb4c3ecfba245ea945944fc112d8e8d1d99a9662a6d07b3a3d1d1c5e7495a4057a0e1ad2e6a110b028e722f962e16cf69
SSDEEP

3072:jAZZqhTF5u61utrkSwFsJ90SGx2IBzBBg5B:CyEro+J90ZNB

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  153KB
- MD5
  
  e76782424eec65609faa37012ab94e09
- SHA1
  
  080eb5f7f2b3bcf4a281d05711e1b962a163bc44
- SHA256
  
  aa052b9f9248df32c316df1025d6dac36cca734ab7fd9edeb1fe5d9ac3833a02
- SHA512
  
  4bbedab61ad7a6ad0cc5bc76b995ec3eb4c3ecfba245ea945944fc112d8e8d1d99a9662a6d07b3a3d1d1c5e7495a4057a0e1ad2e6a110b028e722f962e16cf69
- SSDEEP
  
  3072:jAZZqhTF5u61utrkSwFsJ90SGx2IBzBBg5B:CyEro+J90ZNB
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan