smokeloader | 0cef16e2ddac546d51cc980104078aad9b4128224140028a38a594120f13b3d5 | Triage

Sharing

General

Target

0cef16e2ddac546d51cc980104078aad9b4128224140028a38a594120f13b3d5
Size

326KB
Sample

220928-eked7sgbbl
MD5

eb4af4b9187c97d4b11418bc2ee693b6
SHA1

0d21e00d3754179827e9cb26db3ed8c5eee48865
SHA256

0cef16e2ddac546d51cc980104078aad9b4128224140028a38a594120f13b3d5
SHA512

efb5a764672a5bc354539ef421232a82be5ef53ff903684407fba9dcf431bdd6eaff2f4e454f6454354c619fda74d47140c2d1055cb4300055916a909a8404bf
SSDEEP

6144:1jq3HLYcO94uF3O4eOi9Oi0A21BnigabwVfsP:1jq7Y594ulNsAniBP

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  0cef16e2ddac546d51cc980104078aad9b4128224140028a38a594120f13b3d5
- Size
  
  326KB
- MD5
  
  eb4af4b9187c97d4b11418bc2ee693b6
- SHA1
  
  0d21e00d3754179827e9cb26db3ed8c5eee48865
- SHA256
  
  0cef16e2ddac546d51cc980104078aad9b4128224140028a38a594120f13b3d5
- SHA512
  
  efb5a764672a5bc354539ef421232a82be5ef53ff903684407fba9dcf431bdd6eaff2f4e454f6454354c619fda74d47140c2d1055cb4300055916a909a8404bf
- SSDEEP
  
  6144:1jq3HLYcO94uF3O4eOi9Oi0A21BnigabwVfsP:1jq7Y594ulNsAniBP
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan