smokeloader | d45188226339c4b1a093548c038e3c5650be473fad407d8c5d9e31044ac7026f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

267KB
Sample

221028-az7xvaedgk
MD5

1b5757f6bf45612b1cb723dde0c91a23
SHA1

f36fdf71ab2406f28ea17cc053f4cad27f5adfda
SHA256

d45188226339c4b1a093548c038e3c5650be473fad407d8c5d9e31044ac7026f
SHA512

c31e4888061fd7da9f4a806afe055a434754f03e7bbedf8aa1c80ed9a1ebd633d07b79a5d826e47910211591423e39b557657670b07a2a65fe7cd1497e53516b
SSDEEP

3072:/HXOsq5Kx+UIX15RPtxYH+QnEmJtUyG2jvbiwHO/hnSMM/h31:vfqTpPtIbJrj2wH4hnSM

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  267KB
- MD5
  
  1b5757f6bf45612b1cb723dde0c91a23
- SHA1
  
  f36fdf71ab2406f28ea17cc053f4cad27f5adfda
- SHA256
  
  d45188226339c4b1a093548c038e3c5650be473fad407d8c5d9e31044ac7026f
- SHA512
  
  c31e4888061fd7da9f4a806afe055a434754f03e7bbedf8aa1c80ed9a1ebd633d07b79a5d826e47910211591423e39b557657670b07a2a65fe7cd1497e53516b
- SSDEEP
  
  3072:/HXOsq5Kx+UIX15RPtxYH+QnEmJtUyG2jvbiwHO/hnSMM/h31:vfqTpPtIbJrj2wH4hnSM
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan