smokeloader | c21190fb5355742915278f5f3d2793a86cbb8f744f4dc6443fdb95a98862b729 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c21190fb5355742915278f5f3d2793a86cbb8f744f4dc6443fdb95a98862b729
Size

272KB
Sample

221005-fqy68sddd4
MD5

9fa4b38c22ac2ee7d563b468efe2946c
SHA1

7fbb59bf0c105b21951cf520d60ff51fb48b165b
SHA256

c21190fb5355742915278f5f3d2793a86cbb8f744f4dc6443fdb95a98862b729
SHA512

9ce9c63f060a6db9d32862f0fee46798493c1d945e436152200083f566f0c9a29b66872397243725f351548e91e6194b0751572b676c2081e87dc0dcf408ca4a
SSDEEP

6144:sua8K1eV1Ljio697N5xLs5NOvuzbgwu+Vx/wVff:suhKcXioa7N5U4unnjw

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  c21190fb5355742915278f5f3d2793a86cbb8f744f4dc6443fdb95a98862b729
- Size
  
  272KB
- MD5
  
  9fa4b38c22ac2ee7d563b468efe2946c
- SHA1
  
  7fbb59bf0c105b21951cf520d60ff51fb48b165b
- SHA256
  
  c21190fb5355742915278f5f3d2793a86cbb8f744f4dc6443fdb95a98862b729
- SHA512
  
  9ce9c63f060a6db9d32862f0fee46798493c1d945e436152200083f566f0c9a29b66872397243725f351548e91e6194b0751572b676c2081e87dc0dcf408ca4a
- SSDEEP
  
  6144:sua8K1eV1Ljio697N5xLs5NOvuzbgwu+Vx/wVff:suhKcXioa7N5U4unnjw
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan