smokeloader | 4b2deeb2c5aeb1c2c5c838c24ecd229cc94df1b3b3b09534736ae97949db4897 | Triage

Sharing

General

Target

0f22ab81f0f9b38e55ec1641388aa9470f7ba03b19130f2f46aab62f3739c596
Size

140KB
Sample

221025-br8d3sbbhp
MD5

7a71af80d07765e7bbd888844a21a1fc
SHA1

7676b494eda4a582787531a99d2422151da1b7cd
SHA256

4b2deeb2c5aeb1c2c5c838c24ecd229cc94df1b3b3b09534736ae97949db4897
SHA512

30d9759528633e22776fc18fbe2ec3d0bc26244265da71f3e6f2b9d2ec6faa45b810308f53404df835fb9f02584b2b30fa0a129bd98f069321be5806e563020e
SSDEEP

3072:xRGHj4gZoj/hnluApwRddZdi3RHTI3wLnUaWY0TbM2r:TGHcgZiDwndGTdYbM2r

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  0f22ab81f0f9b38e55ec1641388aa9470f7ba03b19130f2f46aab62f3739c596
- Size
  
  221KB
- MD5
  
  2355365f48142ec4f110089668c5ff53
- SHA1
  
  0b8e615044eda9cf618576ae220a52ecc6297445
- SHA256
  
  0f22ab81f0f9b38e55ec1641388aa9470f7ba03b19130f2f46aab62f3739c596
- SHA512
  
  7050f08b39a3143417c2ba45582a6b91104bc968706e94b5b7e5c6c01dfdd099aa0b3f460ada1396f2a4b9319f7a85581bc147d2329c2dddcbeb46fd1cec162e
- SSDEEP
  
  3072:iaYN359kq8OXBQLokw7r6ss5vKXRyt4S/9y3PvIYv0ON/EWUcUG:iai5acQLS7rtUKyknD8ON
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan