smokeloader | 6eafecd954d3654cdbe1663e22d72f9d8dd2d9e254589fcb92a68a89e06fab14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6eafecd954d3654cdbe1663e22d72f9d8dd2d9e254589fcb92a68a89e06fab14
Size

214KB
Sample

221016-b3dc3sgfc8
MD5

ca4933fbf8b68c3025438a0d7c7465c7
SHA1

8bb67bc7eaf4cc7d95ca8d01a64003f5c4166dbc
SHA256

6eafecd954d3654cdbe1663e22d72f9d8dd2d9e254589fcb92a68a89e06fab14
SHA512

624bf259820b342d9b661a5de6e12a92b9d6ed009cfae952827f794560fab437ae1f662289e29c6bcbb2478c12339f8428bd50c37b7e4b8813a62e61d4ec1eb6
SSDEEP

3072:tXp5lNAeLHFgxgpyZ85EV0PX9nKStrmHJBa9uF80K4ffQCab/:ppN5LHFQZE8StaHS8F809fha

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  6eafecd954d3654cdbe1663e22d72f9d8dd2d9e254589fcb92a68a89e06fab14
- Size
  
  214KB
- MD5
  
  ca4933fbf8b68c3025438a0d7c7465c7
- SHA1
  
  8bb67bc7eaf4cc7d95ca8d01a64003f5c4166dbc
- SHA256
  
  6eafecd954d3654cdbe1663e22d72f9d8dd2d9e254589fcb92a68a89e06fab14
- SHA512
  
  624bf259820b342d9b661a5de6e12a92b9d6ed009cfae952827f794560fab437ae1f662289e29c6bcbb2478c12339f8428bd50c37b7e4b8813a62e61d4ec1eb6
- SSDEEP
  
  3072:tXp5lNAeLHFgxgpyZ85EV0PX9nKStrmHJBa9uF80K4ffQCab/:ppN5LHFQZE8StaHS8F809fha
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan