smokeloader | f4b0c71ce00b8a1534898103a3707d1f03edda5bed17bf881a71403ec8784bdd | Triage

Sharing

General

Target

f4b0c71ce00b8a1534898103a3707d1f03edda5bed17bf881a71403ec8784bdd
Size

257KB
Sample

221009-kaq8xagfd7
MD5

494fc15ca889432779fb9cb1a4980da2
SHA1

46850d79f1f9b7f19a4b9076e37a0a94df2f8ecd
SHA256

f4b0c71ce00b8a1534898103a3707d1f03edda5bed17bf881a71403ec8784bdd
SHA512

f2bd61713270d3e1f3d4f5bb020b401b8f29780a87fd38586e3964c308301d67968c4a01435ce169f0f82da802adfa904de224997d034070dc8069d993765a8d
SSDEEP

6144:ESLL0y4tJ82KPgfox44q/78qN7t6LrwVfMD:ESLI82Ugfox5qNM1

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  f4b0c71ce00b8a1534898103a3707d1f03edda5bed17bf881a71403ec8784bdd
- Size
  
  257KB
- MD5
  
  494fc15ca889432779fb9cb1a4980da2
- SHA1
  
  46850d79f1f9b7f19a4b9076e37a0a94df2f8ecd
- SHA256
  
  f4b0c71ce00b8a1534898103a3707d1f03edda5bed17bf881a71403ec8784bdd
- SHA512
  
  f2bd61713270d3e1f3d4f5bb020b401b8f29780a87fd38586e3964c308301d67968c4a01435ce169f0f82da802adfa904de224997d034070dc8069d993765a8d
- SSDEEP
  
  6144:ESLL0y4tJ82KPgfox44q/78qN7t6LrwVfMD:ESLI82Ugfox5qNM1
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan