smokeloader | a782f2ae7c915eda8f4144ecc9519a58afc8539ce368f3b81e904823fecc998d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a782f2ae7c915eda8f4144ecc9519a58afc8539ce368f3b81e904823fecc998d
Size

212KB
Sample

221016-nz117ahdfm
MD5

2a2724262fb76ceee8a9ffb30bbab3dd
SHA1

16e280d3d854a94b46ae7e6981455121d29771c4
SHA256

a782f2ae7c915eda8f4144ecc9519a58afc8539ce368f3b81e904823fecc998d
SHA512

65e65be10d103b25944180abae8c94bfeac098bd8dfbed95ca7a1b8751a599050bf6f4b824f653321a4f4a338e84823c66d5d8e99cbcecc199eb71ce33769bf3
SSDEEP

3072:8XpFxHmLB2AszQ9B5RhBahSdPdbuwp9cWnW5VqjftEvPL90Ksc:4FHmLW6draU5FuwjcWW7aoL90

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  a782f2ae7c915eda8f4144ecc9519a58afc8539ce368f3b81e904823fecc998d
- Size
  
  212KB
- MD5
  
  2a2724262fb76ceee8a9ffb30bbab3dd
- SHA1
  
  16e280d3d854a94b46ae7e6981455121d29771c4
- SHA256
  
  a782f2ae7c915eda8f4144ecc9519a58afc8539ce368f3b81e904823fecc998d
- SHA512
  
  65e65be10d103b25944180abae8c94bfeac098bd8dfbed95ca7a1b8751a599050bf6f4b824f653321a4f4a338e84823c66d5d8e99cbcecc199eb71ce33769bf3
- SSDEEP
  
  3072:8XpFxHmLB2AszQ9B5RhBahSdPdbuwp9cWnW5VqjftEvPL90Ksc:4FHmLW6draU5FuwjcWW7aoL90
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan