smokeloader | a525531a02365266d098b10a1a536efaf1ac245b7f502a4613d0ab01f0343209 | Triage

Sharing

General

Target

file.exe
Size

132KB
Sample

221003-bdsfpshhe7
MD5

685406982ec0ebd57ef750f99ab05486
SHA1

4318e5e833fdf5145bd7e539520453f9556788ee
SHA256

a525531a02365266d098b10a1a536efaf1ac245b7f502a4613d0ab01f0343209
SHA512

76450c50bdca21f3c6ba03ef64dacf05775fd59d91d0d6fc4a011e19fb976ca32e7570234f63db60d1b20a57ce6848c089206a5ec04f6290b521cdc67dc68168
SSDEEP

1536:eghDOJPjYDGCm6ORYhjA+IbRAkkMr38FSEqWsmCfiM74OzzhN1jNmiX+:ewiJk9ORcA+4Aosd11wjFPL18iX

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  132KB
- MD5
  
  685406982ec0ebd57ef750f99ab05486
- SHA1
  
  4318e5e833fdf5145bd7e539520453f9556788ee
- SHA256
  
  a525531a02365266d098b10a1a536efaf1ac245b7f502a4613d0ab01f0343209
- SHA512
  
  76450c50bdca21f3c6ba03ef64dacf05775fd59d91d0d6fc4a011e19fb976ca32e7570234f63db60d1b20a57ce6848c089206a5ec04f6290b521cdc67dc68168
- SSDEEP
  
  1536:eghDOJPjYDGCm6ORYhjA+IbRAkkMr38FSEqWsmCfiM74OzzhN1jNmiX+:ewiJk9ORcA+4Aosd11wjFPL18iX
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan