smokeloader | 18a6a06cfac334ab0e7a2ca7033f2eb581e6e8f42c4cef5ba120b8faa54f2787 | Triage

Sharing

General

Target

18a6a06cfac334ab0e7a2ca7033f2eb581e6e8f42c4cef5ba120b8faa54f2787
Size

146KB
Sample

221001-bqfmnsgcck
MD5

8459b44b1d6a0bd41fff56954aa4e24e
SHA1

fa4ba70ab706058344af0b3aa7779d8354fb14c2
SHA256

18a6a06cfac334ab0e7a2ca7033f2eb581e6e8f42c4cef5ba120b8faa54f2787
SHA512

7417efee07bc3b55219aa55945f58c4e47c0d799cdf916e1ed35271656f31b488a873dc92f40fe324694c673a5d880019a3fee8dc427554c4ab7e2dce08f9580
SSDEEP

1536:aTmUewpcc0HJPzcMc8rpWPRgzmj+4I2pkcr/0j+onMflQSoqo+PAMIncIzNg1KE2:aTmUjsVWPR64IJcrmwoHM8co2dwvGG

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  18a6a06cfac334ab0e7a2ca7033f2eb581e6e8f42c4cef5ba120b8faa54f2787
- Size
  
  146KB
- MD5
  
  8459b44b1d6a0bd41fff56954aa4e24e
- SHA1
  
  fa4ba70ab706058344af0b3aa7779d8354fb14c2
- SHA256
  
  18a6a06cfac334ab0e7a2ca7033f2eb581e6e8f42c4cef5ba120b8faa54f2787
- SHA512
  
  7417efee07bc3b55219aa55945f58c4e47c0d799cdf916e1ed35271656f31b488a873dc92f40fe324694c673a5d880019a3fee8dc427554c4ab7e2dce08f9580
- SSDEEP
  
  1536:aTmUewpcc0HJPzcMc8rpWPRgzmj+4I2pkcr/0j+onMflQSoqo+PAMIncIzNg1KE2:aTmUjsVWPR64IJcrmwoHM8co2dwvGG
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan