smokeloader | 3cf049f3b0b796f651ad7f88b3e4328077204793a837fda0b624fb426275ce7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cf049f3b0b796f651ad7f88b3e4328077204793a837fda0b624fb426275ce7e
Size

204KB
Sample

221018-2pjwtaeac3
MD5

dba8f9b9eca4c227a533d43876e3b7c0
SHA1

88ebec53605d66a371e6a389b63fe76104631938
SHA256

3cf049f3b0b796f651ad7f88b3e4328077204793a837fda0b624fb426275ce7e
SHA512

977c6e4a2285e58af4fa77931674b2f45eeb75ac4a562077afa726e3b1df3ed42dcd08453e9497b97abc17764e61bab8afc8e930130b5c97f26fcd82cf777bb4
SSDEEP

3072:zXDrFRuLtAg41503SIjcJQ9nCzMc7iMUJitaDNa9W2vULNKk0KmIfn8s94UuSJ:rXFRuLGHGjA+no7ivx5xN5p0DIPVNuS

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  3cf049f3b0b796f651ad7f88b3e4328077204793a837fda0b624fb426275ce7e
- Size
  
  204KB
- MD5
  
  dba8f9b9eca4c227a533d43876e3b7c0
- SHA1
  
  88ebec53605d66a371e6a389b63fe76104631938
- SHA256
  
  3cf049f3b0b796f651ad7f88b3e4328077204793a837fda0b624fb426275ce7e
- SHA512
  
  977c6e4a2285e58af4fa77931674b2f45eeb75ac4a562077afa726e3b1df3ed42dcd08453e9497b97abc17764e61bab8afc8e930130b5c97f26fcd82cf777bb4
- SSDEEP
  
  3072:zXDrFRuLtAg41503SIjcJQ9nCzMc7iMUJitaDNa9W2vULNKk0KmIfn8s94UuSJ:rXFRuLGHGjA+no7ivx5xN5p0DIPVNuS
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan