smokeloader | f47482189f9f91f200e5dd4a2235260fa51af7c512d3bcf9a1aa6623fc34cbd1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

268KB
Sample

221007-2vhwpsdgc4
MD5

8dbf9023c29f4f1307202960127027ab
SHA1

40a6240b822a573695cc99a4408940db58de41ef
SHA256

f47482189f9f91f200e5dd4a2235260fa51af7c512d3bcf9a1aa6623fc34cbd1
SHA512

f1c9a298100ac2cd56975a543bf33e9dc07f063a14989770e9549e5255e4c4dc03f09e64551c1297b12faf4a012af18d99e54190cd3048633b73971b06bebdd7
SSDEEP

6144:rzZ9P+0bXRix//O7g/ymtlRth7ITsqe4:rz7200x3O7YRth7R4

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  268KB
- MD5
  
  8dbf9023c29f4f1307202960127027ab
- SHA1
  
  40a6240b822a573695cc99a4408940db58de41ef
- SHA256
  
  f47482189f9f91f200e5dd4a2235260fa51af7c512d3bcf9a1aa6623fc34cbd1
- SHA512
  
  f1c9a298100ac2cd56975a543bf33e9dc07f063a14989770e9549e5255e4c4dc03f09e64551c1297b12faf4a012af18d99e54190cd3048633b73971b06bebdd7
- SSDEEP
  
  6144:rzZ9P+0bXRix//O7g/ymtlRth7ITsqe4:rz7200x3O7YRth7R4
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan