smokeloader | 8a73d22697c1ec48aa37ac9440471a1247ad69fe9f87cb49c2f0e059009aca65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a73d22697c1ec48aa37ac9440471a1247ad69fe9f87cb49c2f0e059009aca65
Size

216KB
Sample

221017-qb6mwacaer
MD5

59d01bef2cae85ee36c51ab8d36e0723
SHA1

9ef3f0c63ada0cfad515eb5de9c8ae6eb59eee30
SHA256

8a73d22697c1ec48aa37ac9440471a1247ad69fe9f87cb49c2f0e059009aca65
SHA512

6120265c31e1efc21d8ecb00cb224195b851bfde6760b0eb231f7d50c1ba7a4b16e71be9628d9653a7e56c840ccba869962d937536e2017386a0852a6bbe6cb0
SSDEEP

3072:YrAnfShmehOWEkvCCLatQgNI4KxCZeC6DWH9RGEzg9KROnml0TzLeYgd:Ykn4gWztLanNIZwHjpfOmqz

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  8a73d22697c1ec48aa37ac9440471a1247ad69fe9f87cb49c2f0e059009aca65
- Size
  
  216KB
- MD5
  
  59d01bef2cae85ee36c51ab8d36e0723
- SHA1
  
  9ef3f0c63ada0cfad515eb5de9c8ae6eb59eee30
- SHA256
  
  8a73d22697c1ec48aa37ac9440471a1247ad69fe9f87cb49c2f0e059009aca65
- SHA512
  
  6120265c31e1efc21d8ecb00cb224195b851bfde6760b0eb231f7d50c1ba7a4b16e71be9628d9653a7e56c840ccba869962d937536e2017386a0852a6bbe6cb0
- SSDEEP
  
  3072:YrAnfShmehOWEkvCCLatQgNI4KxCZeC6DWH9RGEzg9KROnml0TzLeYgd:Ykn4gWztLanNIZwHjpfOmqz
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan