smokeloader | a5ce3fdcd4eacf12d7ce30478acf634f86a947b473884dd850efdad37961e1ec | Triage

Sharing

General

Target

a5ce3fdcd4eacf12d7ce30478acf634f86a947b473884dd850efdad37961e1ec
Size

268KB
Sample

221007-bxl32abear
MD5

fde3e1129de0d5f1025ce80d3e8cee8b
SHA1

9ea02c3cf8c5cc57f7df79f729b6ed4a4bc905d5
SHA256

a5ce3fdcd4eacf12d7ce30478acf634f86a947b473884dd850efdad37961e1ec
SHA512

af048544261cee3ec93afb4b5a45bfcafdd129391077e221f2b3ffc68f260def821902152cee0c1500898ebff213a99775feef09f868777bbb66fa2ee9be52fb
SSDEEP

3072:XXIZuiHLkcrdfh2x5/uB2gVbUY2E8T7++QnHRMlNlUC0FYWrxpzbgqruUXA6kpZr:HXKdfHZjQBQHg7UC0FYuzbgwuUmwVfU

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  a5ce3fdcd4eacf12d7ce30478acf634f86a947b473884dd850efdad37961e1ec
- Size
  
  268KB
- MD5
  
  fde3e1129de0d5f1025ce80d3e8cee8b
- SHA1
  
  9ea02c3cf8c5cc57f7df79f729b6ed4a4bc905d5
- SHA256
  
  a5ce3fdcd4eacf12d7ce30478acf634f86a947b473884dd850efdad37961e1ec
- SHA512
  
  af048544261cee3ec93afb4b5a45bfcafdd129391077e221f2b3ffc68f260def821902152cee0c1500898ebff213a99775feef09f868777bbb66fa2ee9be52fb
- SSDEEP
  
  3072:XXIZuiHLkcrdfh2x5/uB2gVbUY2E8T7++QnHRMlNlUC0FYWrxpzbgqruUXA6kpZr:HXKdfHZjQBQHg7UC0FYuzbgwuUmwVfU
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan