smokeloader | edd62022ecde1069e890468d494a635614a1ec82e196bd4750994e4c2f863aee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edd62022ecde1069e890468d494a635614a1ec82e196bd4750994e4c2f863aee.exe
Size

216KB
Sample

221019-nccebafhej
MD5

06c40ed6ff6706e599656fd4af0280a0
SHA1

f85b0302cf06983a8dfe9417566845843e24be19
SHA256

edd62022ecde1069e890468d494a635614a1ec82e196bd4750994e4c2f863aee
SHA512

6420daed264db5aba86fe627b410a7100474bc1b77b79f77fa4689709ef760e59341e26052cf8bb4d3cb255b5c6aa545ef36d31d516bd0f2f2d2762e4776a98f
SSDEEP

3072:gLArHwG1mJNNWgKXvVMLBCViGI2uTCFsEuPMrfsv+GQVssRsTM7:gErd4WFGLBHGIssj+GQF

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  edd62022ecde1069e890468d494a635614a1ec82e196bd4750994e4c2f863aee.exe
- Size
  
  216KB
- MD5
  
  06c40ed6ff6706e599656fd4af0280a0
- SHA1
  
  f85b0302cf06983a8dfe9417566845843e24be19
- SHA256
  
  edd62022ecde1069e890468d494a635614a1ec82e196bd4750994e4c2f863aee
- SHA512
  
  6420daed264db5aba86fe627b410a7100474bc1b77b79f77fa4689709ef760e59341e26052cf8bb4d3cb255b5c6aa545ef36d31d516bd0f2f2d2762e4776a98f
- SSDEEP
  
  3072:gLArHwG1mJNNWgKXvVMLBCViGI2uTCFsEuPMrfsv+GQVssRsTM7:gErd4WFGLBHGIssj+GQF
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan