smokeloader | 38538f6e907af2e6c6b22d36faaa5205643a2ea2fe2123ea4a195808692b1501 | Triage

Sharing

General

Target

38538f6e907af2e6c6b22d36faaa5205643a2ea2fe2123ea4a195808692b1501
Size

271KB
Sample

221005-znqxmafhbl
MD5

06b0b68e94ba183c223bd4c223d5dadd
SHA1

3c6e27136edec2f8fa56d7908704eebc843bc227
SHA256

38538f6e907af2e6c6b22d36faaa5205643a2ea2fe2123ea4a195808692b1501
SHA512

fcc9d2830fac0c2a393476834081bd744c8e35709f2653ef129067ec96e0545531d7edd0d85cd5404af4c378deb18e82b96397731faccc98249342176476638e
SSDEEP

6144:uYnt1KL0dGl2E+hIruzbgwuWDPFwVfUPk:uYqQdGlQmunnrbbc

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  38538f6e907af2e6c6b22d36faaa5205643a2ea2fe2123ea4a195808692b1501
- Size
  
  271KB
- MD5
  
  06b0b68e94ba183c223bd4c223d5dadd
- SHA1
  
  3c6e27136edec2f8fa56d7908704eebc843bc227
- SHA256
  
  38538f6e907af2e6c6b22d36faaa5205643a2ea2fe2123ea4a195808692b1501
- SHA512
  
  fcc9d2830fac0c2a393476834081bd744c8e35709f2653ef129067ec96e0545531d7edd0d85cd5404af4c378deb18e82b96397731faccc98249342176476638e
- SSDEEP
  
  6144:uYnt1KL0dGl2E+hIruzbgwuWDPFwVfUPk:uYqQdGlQmunnrbbc
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan