smokeloader | 9f6b8b8e7cdd07f6fa1a32840aeda503bfd5af6d238e9763ccb2015cea2d923b | Triage

Sharing

General

Target

malware_smoke_320514046
Size

3.2MB
Sample

221004-vq3lzsbfb6
MD5

bf0e21100030960c2645c7821463660b
SHA1

b9ede7edf5e120b93f6c6442f1b522e35ea9ad47
SHA256

9f6b8b8e7cdd07f6fa1a32840aeda503bfd5af6d238e9763ccb2015cea2d923b
SHA512

93f6b78032b823032d84d8117e722c6aefc224d7e925835adc6512f763fa5b741f35313ba72f17d02d5518c8c598069be4dd52c275198bfe1e74b47e2549d782
SSDEEP

49152:YePKD8aAjLWB1KlVq5zsFVqBrLAUj0nnTXV+V/x7Y:YePVBLdlGSYBrLAM0nTXV+

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  malware_smoke_320514046
- Size
  
  3.2MB
- MD5
  
  bf0e21100030960c2645c7821463660b
- SHA1
  
  b9ede7edf5e120b93f6c6442f1b522e35ea9ad47
- SHA256
  
  9f6b8b8e7cdd07f6fa1a32840aeda503bfd5af6d238e9763ccb2015cea2d923b
- SHA512
  
  93f6b78032b823032d84d8117e722c6aefc224d7e925835adc6512f763fa5b741f35313ba72f17d02d5518c8c598069be4dd52c275198bfe1e74b47e2549d782
- SSDEEP
  
  49152:YePKD8aAjLWB1KlVq5zsFVqBrLAUj0nnTXV+V/x7Y:YePVBLdlGSYBrLAM0nTXV+
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan