smokeloader | 8687e077f773bced2e6d2a465208ac1cb3e1ed34726a31dd74bd89d4a233c9d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

284KB
Sample

220929-rdtxjabba2
MD5

aad9935c3a03396febe6cf03990ac293
SHA1

b255a02890075d46c084fa0e1e12b157e125ccfb
SHA256

8687e077f773bced2e6d2a465208ac1cb3e1ed34726a31dd74bd89d4a233c9d1
SHA512

ace0069d1a98521eeb037d7e495fbd9a3a81aa93a8c3fd99a08d8dc1e65da0594874a92e92f25f7b88be6ea9342e0dc3565e3e51119c90775f7caceca8918a96
SSDEEP

6144:o+XWyBnAia3hCkDtukuzbgwuO0aFVMncwVfg9:oqWSBaRCkxZunnwaFqng

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  284KB
- MD5
  
  aad9935c3a03396febe6cf03990ac293
- SHA1
  
  b255a02890075d46c084fa0e1e12b157e125ccfb
- SHA256
  
  8687e077f773bced2e6d2a465208ac1cb3e1ed34726a31dd74bd89d4a233c9d1
- SHA512
  
  ace0069d1a98521eeb037d7e495fbd9a3a81aa93a8c3fd99a08d8dc1e65da0594874a92e92f25f7b88be6ea9342e0dc3565e3e51119c90775f7caceca8918a96
- SSDEEP
  
  6144:o+XWyBnAia3hCkDtukuzbgwuO0aFVMncwVfg9:oqWSBaRCkxZunnwaFqng
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan