smokeloader | 6445ea64fad601ddbae623d60fdd2b874eb82adc1ab41b5229b44f6b579a14c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6445ea64fad601ddbae623d60fdd2b874eb82adc1ab41b5229b44f6b579a14c0
Size

195KB
Sample

221020-nlqnasbfbk
MD5

082ec822cdc533ba0dea2e4831e64778
SHA1

c90c63ebe372c0e34146439cd5b1cec9e1c44cae
SHA256

6445ea64fad601ddbae623d60fdd2b874eb82adc1ab41b5229b44f6b579a14c0
SHA512

f91a1ec6c5f44cd2130d25326766ae31d8912678afecfc8d63eb2d648ee61a0a89b0de6a85fd51777143ace87ba1177daecae87c438b59c65533d20a3fc70964
SSDEEP

3072:/Xejlxk6OLXkUKiE5vqyeqcc/7GYaaeltzOG7r70KPZl:v+lxvOLUziUXUQkX7r70qZ

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  6445ea64fad601ddbae623d60fdd2b874eb82adc1ab41b5229b44f6b579a14c0
- Size
  
  195KB
- MD5
  
  082ec822cdc533ba0dea2e4831e64778
- SHA1
  
  c90c63ebe372c0e34146439cd5b1cec9e1c44cae
- SHA256
  
  6445ea64fad601ddbae623d60fdd2b874eb82adc1ab41b5229b44f6b579a14c0
- SHA512
  
  f91a1ec6c5f44cd2130d25326766ae31d8912678afecfc8d63eb2d648ee61a0a89b0de6a85fd51777143ace87ba1177daecae87c438b59c65533d20a3fc70964
- SSDEEP
  
  3072:/Xejlxk6OLXkUKiE5vqyeqcc/7GYaaeltzOG7r70KPZl:v+lxvOLUziUXUQkX7r70qZ
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan