smokeloader | 7477290dc320eab7aeeda8bb694b2e42457495e7322ce93578149ef874064b8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7477290dc320eab7aeeda8bb694b2e42457495e7322ce93578149ef874064b8f
Size

318KB
Sample

220927-nwad3addc3
MD5

f81f89208ea0d56c12758e83d457ed4e
SHA1

0b00c0ec59aa675e97add1a4d6cdf5e1fe645f44
SHA256

7477290dc320eab7aeeda8bb694b2e42457495e7322ce93578149ef874064b8f
SHA512

5ebcd9605adb3786833f7f5a3255bbf3e81352f8c22b7860b39d8f8afb2297c95d288c82c7d4ab9048f08985581eee616b1197b6fe862e7a9f666cae219e02a8
SSDEEP

3072:YJXPlBz8WU7ETn/25aveMMucQvuNLY2nFYtbKSuCA0K60nACVhQhM/h3BsxkgaB9:Yt3ZnHeOMY3A0xC/enigabwVf

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  7477290dc320eab7aeeda8bb694b2e42457495e7322ce93578149ef874064b8f
- Size
  
  318KB
- MD5
  
  f81f89208ea0d56c12758e83d457ed4e
- SHA1
  
  0b00c0ec59aa675e97add1a4d6cdf5e1fe645f44
- SHA256
  
  7477290dc320eab7aeeda8bb694b2e42457495e7322ce93578149ef874064b8f
- SHA512
  
  5ebcd9605adb3786833f7f5a3255bbf3e81352f8c22b7860b39d8f8afb2297c95d288c82c7d4ab9048f08985581eee616b1197b6fe862e7a9f666cae219e02a8
- SSDEEP
  
  3072:YJXPlBz8WU7ETn/25aveMMucQvuNLY2nFYtbKSuCA0K60nACVhQhM/h3BsxkgaB9:Yt3ZnHeOMY3A0xC/enigabwVf
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan