smokeloader | cf9bc18e604d4edb3ff07e259accb258b04731e1d3791f983115d3b46af3259a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b1aff07f3637991176a862577e4069d.bin
Size

271KB
Sample

221026-l1w3hsfdaj
MD5

2b1aff07f3637991176a862577e4069d
SHA1

123a7fc4bf93686d134bec414ed0978a5e5015ae
SHA256

cf9bc18e604d4edb3ff07e259accb258b04731e1d3791f983115d3b46af3259a
SHA512

4e442c4a7fa9889f7c8cd6c2bc373227353c41689b69c6f9e0c9319b9a284a52359120511c148265a9305d02fe37ac8f4ba4a5fbc13e1e43851d9899e87c40f3
SSDEEP

6144:Q39BNxAFl9w6xW3xyhh9pDxZPbcXiga3wVfg:Q0l9pyxYRYyp

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  2b1aff07f3637991176a862577e4069d.bin
- Size
  
  271KB
- MD5
  
  2b1aff07f3637991176a862577e4069d
- SHA1
  
  123a7fc4bf93686d134bec414ed0978a5e5015ae
- SHA256
  
  cf9bc18e604d4edb3ff07e259accb258b04731e1d3791f983115d3b46af3259a
- SHA512
  
  4e442c4a7fa9889f7c8cd6c2bc373227353c41689b69c6f9e0c9319b9a284a52359120511c148265a9305d02fe37ac8f4ba4a5fbc13e1e43851d9899e87c40f3
- SSDEEP
  
  6144:Q39BNxAFl9w6xW3xyhh9pDxZPbcXiga3wVfg:Q0l9pyxYRYyp
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan