smokeloader | 295957b91472ca9d8fea1dc1aa7fe1f4b3755e872a09e1919a334be353bfb90e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

295957b91472ca9d8fea1dc1aa7fe1f4b3755e872a09e1919a334be353bfb90e
Size

146KB
Sample

221001-r3w37agbe7
MD5

7cf7d917fd49e6328d57c49e574f2cd3
SHA1

e237df71224e84e9e0dca04ef72421f374e79b05
SHA256

295957b91472ca9d8fea1dc1aa7fe1f4b3755e872a09e1919a334be353bfb90e
SHA512

a28b23d599c3273ca501588c8c6478a4a961293ba4a1c29ae00eeedf25bfa32b153161cc46e2d6b8b104455c85c0a81bdea8af3e7b567130db2c58851146084b
SSDEEP

1536:vbGsQt/5FZbZ+C92KZR2fawIx9KrFJaSPqC5siXTa6w+E3U/00TzMRQ9RT2PuTjV:vb3SyKZRTMr17aJ33S06zMoT2MaY

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  295957b91472ca9d8fea1dc1aa7fe1f4b3755e872a09e1919a334be353bfb90e
- Size
  
  146KB
- MD5
  
  7cf7d917fd49e6328d57c49e574f2cd3
- SHA1
  
  e237df71224e84e9e0dca04ef72421f374e79b05
- SHA256
  
  295957b91472ca9d8fea1dc1aa7fe1f4b3755e872a09e1919a334be353bfb90e
- SHA512
  
  a28b23d599c3273ca501588c8c6478a4a961293ba4a1c29ae00eeedf25bfa32b153161cc46e2d6b8b104455c85c0a81bdea8af3e7b567130db2c58851146084b
- SSDEEP
  
  1536:vbGsQt/5FZbZ+C92KZR2fawIx9KrFJaSPqC5siXTa6w+E3U/00TzMRQ9RT2PuTjV:vb3SyKZRTMr17aJ33S06zMoT2MaY
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan