smokeloader | 51357dc3f1dfb0108076341446d6284a31f9e5ece2758f5ea62350b9a0cf9f7f | Triage

Sharing

General

Target

51357dc3f1dfb0108076341446d6284a31f9e5ece2758f5ea62350b9a0cf9f7f
Size

147KB
Sample

221001-wct85aabfn
MD5

e3bebdc9e2b084f5e9f814a06986e4b1
SHA1

99fde4578d4e5f58315a87e5b3b8ee1c57af47b5
SHA256

51357dc3f1dfb0108076341446d6284a31f9e5ece2758f5ea62350b9a0cf9f7f
SHA512

c5e1967ec2c072b407d2e948e10e5084afc0f5ad6624702cc822e54e108b6e4e245d90ead16a4d9dab10306e7715b2414928863a4d5d56560f47fe3f5ca6ef73
SSDEEP

3072:6zTVpWHYGRzAlX01pOE3psOuw7pg9jbPx5L:nHzAJOpOEMNbn

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  51357dc3f1dfb0108076341446d6284a31f9e5ece2758f5ea62350b9a0cf9f7f
- Size
  
  147KB
- MD5
  
  e3bebdc9e2b084f5e9f814a06986e4b1
- SHA1
  
  99fde4578d4e5f58315a87e5b3b8ee1c57af47b5
- SHA256
  
  51357dc3f1dfb0108076341446d6284a31f9e5ece2758f5ea62350b9a0cf9f7f
- SHA512
  
  c5e1967ec2c072b407d2e948e10e5084afc0f5ad6624702cc822e54e108b6e4e245d90ead16a4d9dab10306e7715b2414928863a4d5d56560f47fe3f5ca6ef73
- SSDEEP
  
  3072:6zTVpWHYGRzAlX01pOE3psOuw7pg9jbPx5L:nHzAJOpOEMNbn
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan