smokeloader | 87ddd736a45e6fe3cd0dcd57a611880fa9f856755f84e4fd8690e03521a1d44d | Triage

Sharing

General

Target

87ddd736a45e6fe3cd0dcd57a611880fa9f856755f84e4fd8690e03521a1d44d
Size

145KB
Sample

221006-etvgsagcf8
MD5

947f892d4a4e60ef627c67e36003c1ed
SHA1

6412a2f5695932954a86e6b1961d278ca9fea75a
SHA256

87ddd736a45e6fe3cd0dcd57a611880fa9f856755f84e4fd8690e03521a1d44d
SHA512

976fbff953f51a912a58e7159afb8324b589a7da0014c13028f51d7abf4c239fa055cb1d9b683384d9008ff3885e419f563ae2408c775ddff0c84bb58e1e8423
SSDEEP

3072:+qtFzc++goHQPYOgh0tKpJToTh0nOjdpr/EJtO:jXQQwt0tKpJT60nQpr/I

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  87ddd736a45e6fe3cd0dcd57a611880fa9f856755f84e4fd8690e03521a1d44d
- Size
  
  145KB
- MD5
  
  947f892d4a4e60ef627c67e36003c1ed
- SHA1
  
  6412a2f5695932954a86e6b1961d278ca9fea75a
- SHA256
  
  87ddd736a45e6fe3cd0dcd57a611880fa9f856755f84e4fd8690e03521a1d44d
- SHA512
  
  976fbff953f51a912a58e7159afb8324b589a7da0014c13028f51d7abf4c239fa055cb1d9b683384d9008ff3885e419f563ae2408c775ddff0c84bb58e1e8423
- SSDEEP
  
  3072:+qtFzc++goHQPYOgh0tKpJToTh0nOjdpr/EJtO:jXQQwt0tKpJT60nQpr/I
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan