smokeloader | d0842eef00704c219ee9a9e135c8ef195983e120b53e4c2d09fab3629600aea7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

255KB
Sample

221027-z8gjpadeb4
MD5

bcad69e618a2c92a28751ef3f38b11ff
SHA1

d2eb8a79520af4a5405350e2f1a2bc7a9c6d240c
SHA256

d0842eef00704c219ee9a9e135c8ef195983e120b53e4c2d09fab3629600aea7
SHA512

deaca0031da72e8806cd810cd74946e96e7137fa277d7441db9577ebd4ad6bf09c17fdca06655227f115e50ac35fee05f29738515cfc7df733b29cc4ba7a5598
SSDEEP

3072:b1XOxqc1/xxWenq5/Kg6Vv/BZpsAAsmqTgJ3eO2XDRG3QgTzh0Kv:d+qEJg6HLsymPaTRGxR0

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  255KB
- MD5
  
  bcad69e618a2c92a28751ef3f38b11ff
- SHA1
  
  d2eb8a79520af4a5405350e2f1a2bc7a9c6d240c
- SHA256
  
  d0842eef00704c219ee9a9e135c8ef195983e120b53e4c2d09fab3629600aea7
- SHA512
  
  deaca0031da72e8806cd810cd74946e96e7137fa277d7441db9577ebd4ad6bf09c17fdca06655227f115e50ac35fee05f29738515cfc7df733b29cc4ba7a5598
- SSDEEP
  
  3072:b1XOxqc1/xxWenq5/Kg6Vv/BZpsAAsmqTgJ3eO2XDRG3QgTzh0Kv:d+qEJg6HLsymPaTRGxR0
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan