smokeloader | 476eee19ed8c422727d9900fb5065ce206e8dcebd9b2a08c57f6b1af8a2cfb1e | Triage

Sharing

General

Target

476eee19ed8c422727d9900fb5065ce206e8dcebd9b2a08c57f6b1af8a2cfb1e
Size

268KB
Sample

221028-gkrqmsfack
MD5

a2b2d82960423b0ea00a66902c7b29ea
SHA1

d8a0723546521404f2b179027230cd20c4424792
SHA256

476eee19ed8c422727d9900fb5065ce206e8dcebd9b2a08c57f6b1af8a2cfb1e
SHA512

2ecf094997dbb161268347509aad962dd387e15421f82e15b34dc2281d357c87d4eb50d3127ba8c9280a9bbcc3b7c35e24ffc9b233888683312f3d0914b8ebbd
SSDEEP

6144:CrLHSLW8lx7ouLgTUfZZZI9aVVWrPC6j:CrLHSyKxMuLgTUfZZZea6m6j

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  476eee19ed8c422727d9900fb5065ce206e8dcebd9b2a08c57f6b1af8a2cfb1e
- Size
  
  268KB
- MD5
  
  a2b2d82960423b0ea00a66902c7b29ea
- SHA1
  
  d8a0723546521404f2b179027230cd20c4424792
- SHA256
  
  476eee19ed8c422727d9900fb5065ce206e8dcebd9b2a08c57f6b1af8a2cfb1e
- SHA512
  
  2ecf094997dbb161268347509aad962dd387e15421f82e15b34dc2281d357c87d4eb50d3127ba8c9280a9bbcc3b7c35e24ffc9b233888683312f3d0914b8ebbd
- SSDEEP
  
  6144:CrLHSLW8lx7ouLgTUfZZZI9aVVWrPC6j:CrLHSyKxMuLgTUfZZZea6m6j
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan