smokeloader | 1eaa5660c4788cb14faa2020027f7cbf4f1398bf74ebdb862b548246b0dd111e | Triage

Sharing

General

Target

1eaa5660c4788cb14faa2020027f7cbf4f1398bf74ebdb862b548246b0dd111e
Size

146KB
Sample

221001-cvefvagchl
MD5

c996f2ce94b5a591d26be7f60a9a9ab8
SHA1

1fe10b561ff6012f2b210c5cc77a56c0bf8dcb94
SHA256

1eaa5660c4788cb14faa2020027f7cbf4f1398bf74ebdb862b548246b0dd111e
SHA512

e9bbedf1bc7de70e7add149586660871bf58ad4a073fa4e0f4de01c1460cbbd512d6db0349befde7bcdcba4221c8bfd39fc107cb007d2569e9654e47bc142631
SSDEEP

1536:ZKWU+QJ8cU3J/Tscctrp2PRaZBihhV7adc9sGpBFIMKJuYmOrk5OlmI4d:ZKWUjM22PRgBiT7sGpBXaZkQl+d

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  1eaa5660c4788cb14faa2020027f7cbf4f1398bf74ebdb862b548246b0dd111e
- Size
  
  146KB
- MD5
  
  c996f2ce94b5a591d26be7f60a9a9ab8
- SHA1
  
  1fe10b561ff6012f2b210c5cc77a56c0bf8dcb94
- SHA256
  
  1eaa5660c4788cb14faa2020027f7cbf4f1398bf74ebdb862b548246b0dd111e
- SHA512
  
  e9bbedf1bc7de70e7add149586660871bf58ad4a073fa4e0f4de01c1460cbbd512d6db0349befde7bcdcba4221c8bfd39fc107cb007d2569e9654e47bc142631
- SSDEEP
  
  1536:ZKWU+QJ8cU3J/Tscctrp2PRaZBihhV7adc9sGpBFIMKJuYmOrk5OlmI4d:ZKWUjM22PRgBiT7sGpBXaZkQl+d
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan