smokeloader | 78ecccb9b319e86bf8e487077038b0aeaa660aaa6b45c7b366b5c2e329396cfd | Triage

Sharing

General

Target

78ecccb9b319e86bf8e487077038b0aeaa660aaa6b45c7b366b5c2e329396cfd
Size

145KB
Sample

221005-3emqdsgbdq
MD5

ded774599495952cf3f2bb275c1c4bf6
SHA1

4df4bf89eac691d4d6c72600ebc9f03a85f31b63
SHA256

78ecccb9b319e86bf8e487077038b0aeaa660aaa6b45c7b366b5c2e329396cfd
SHA512

6b660e996f7750f65016f178339ae97a580c0180cb9327031b750139a27b91fe814d23178c8e12c57ba221c34e4644048eeaeed477c83586f768ba0bcd91417f
SSDEEP

3072:Egp6M+hfvUGlYlPWZvAOGO2F1xUbk35d/ZuDqu9LO:PBaUpWATGkJdB8Z

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  78ecccb9b319e86bf8e487077038b0aeaa660aaa6b45c7b366b5c2e329396cfd
- Size
  
  145KB
- MD5
  
  ded774599495952cf3f2bb275c1c4bf6
- SHA1
  
  4df4bf89eac691d4d6c72600ebc9f03a85f31b63
- SHA256
  
  78ecccb9b319e86bf8e487077038b0aeaa660aaa6b45c7b366b5c2e329396cfd
- SHA512
  
  6b660e996f7750f65016f178339ae97a580c0180cb9327031b750139a27b91fe814d23178c8e12c57ba221c34e4644048eeaeed477c83586f768ba0bcd91417f
- SSDEEP
  
  3072:Egp6M+hfvUGlYlPWZvAOGO2F1xUbk35d/ZuDqu9LO:PBaUpWATGkJdB8Z
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan