smokeloader | 9ac86eddc6b4a00da1794e4184b7b5905ede4daeeae3247b210c9b61bf309a28 | Triage

Sharing

General

Target

9ac86eddc6b4a00da1794e4184b7b5905ede4daeeae3247b210c9b61bf309a28
Size

147KB
Sample

221001-2k977sadh9
MD5

5d17cf5e87ac53d69a62a2dffd241e56
SHA1

8c8c2d3f6c566d045f69cb1069f25b301eabdb10
SHA256

9ac86eddc6b4a00da1794e4184b7b5905ede4daeeae3247b210c9b61bf309a28
SHA512

b5d526d7e12117576f8cae13aecfd7fd8a1bc7481dcb056915d37cb9cfeff1b47eccfb5ea0595b839c14cacfbefc96f65769be7b303ac8aa3ddf494b7125d002
SSDEEP

1536:guWbmi9Y9xrLZFFiy2stvRJ1hII2zhKiY44/qb30zIkqNxtqwYANBNkoNXFK++lJ:guWKi+qstvR5n2pzDLiSSoVfEnb93fj

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  9ac86eddc6b4a00da1794e4184b7b5905ede4daeeae3247b210c9b61bf309a28
- Size
  
  147KB
- MD5
  
  5d17cf5e87ac53d69a62a2dffd241e56
- SHA1
  
  8c8c2d3f6c566d045f69cb1069f25b301eabdb10
- SHA256
  
  9ac86eddc6b4a00da1794e4184b7b5905ede4daeeae3247b210c9b61bf309a28
- SHA512
  
  b5d526d7e12117576f8cae13aecfd7fd8a1bc7481dcb056915d37cb9cfeff1b47eccfb5ea0595b839c14cacfbefc96f65769be7b303ac8aa3ddf494b7125d002
- SSDEEP
  
  1536:guWbmi9Y9xrLZFFiy2stvRJ1hII2zhKiY44/qb30zIkqNxtqwYANBNkoNXFK++lJ:guWKi+qstvR5n2pzDLiSSoVfEnb93fj
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan