smokeloader | eef411e55641b582db6f361dec069c20abf0681aed99d06a55ccac9243b0d78c | Triage

Sharing

General

Target

eef411e55641b582db6f361dec069c20abf0681aed99d06a55ccac9243b0d78c
Size

145KB
Sample

221001-nh7seaghfp
MD5

a6a0c453cb6935a8a270fdd8e16bca7e
SHA1

b0e7c447fb7d949597c1110d783512801c7163da
SHA256

eef411e55641b582db6f361dec069c20abf0681aed99d06a55ccac9243b0d78c
SHA512

9a044b790d55748eb96d717c68059dd5161958f417dd8cb47a019cbb6e6725e426e3585679185c1174fb609ea7457dd4b0d9a1dee233792e93d7880c91f92550
SSDEEP

1536:hN1uE8nPBj2ipM/2Z/RlWyTo/AG4412U/opBuL+cTrtYFhltQXBhxYRUJfKtOlo:hN1zMpZ/RIyTcx18nExTrmLQXBkulo

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  eef411e55641b582db6f361dec069c20abf0681aed99d06a55ccac9243b0d78c
- Size
  
  145KB
- MD5
  
  a6a0c453cb6935a8a270fdd8e16bca7e
- SHA1
  
  b0e7c447fb7d949597c1110d783512801c7163da
- SHA256
  
  eef411e55641b582db6f361dec069c20abf0681aed99d06a55ccac9243b0d78c
- SHA512
  
  9a044b790d55748eb96d717c68059dd5161958f417dd8cb47a019cbb6e6725e426e3585679185c1174fb609ea7457dd4b0d9a1dee233792e93d7880c91f92550
- SSDEEP
  
  1536:hN1uE8nPBj2ipM/2Z/RlWyTo/AG4412U/opBuL+cTrtYFhltQXBhxYRUJfKtOlo:hN1zMpZ/RIyTcx18nExTrmLQXBkulo
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan