smokeloader | 182b5f62b50fe3711ad7e78c3483d1b57adfae6f6ff040b107bf963d93ba2d9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

182b5f62b50fe3711ad7e78c3483d1b57adfae6f6ff040b107bf963d93ba2d9a
Size

260KB
Sample

221029-bndqasegg6
MD5

dd06779faa03e7f6cea323a397a74e70
SHA1

28cc75778b252d7e8be144e7233e812d76b4de01
SHA256

182b5f62b50fe3711ad7e78c3483d1b57adfae6f6ff040b107bf963d93ba2d9a
SHA512

f34bb59c7a2d99e2c1ec3fb87840c8836fea916b83f662ad53561627cc19fa194dbef436f9f68906360bb5b0d6a7eecc9224e0aac408a879b44342a9744bff90
SSDEEP

6144:4bhBc0LJXYe7GJPuYWRpoQQ0kXFCEM05p:4VBndXI3AdkXio

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  182b5f62b50fe3711ad7e78c3483d1b57adfae6f6ff040b107bf963d93ba2d9a
- Size
  
  260KB
- MD5
  
  dd06779faa03e7f6cea323a397a74e70
- SHA1
  
  28cc75778b252d7e8be144e7233e812d76b4de01
- SHA256
  
  182b5f62b50fe3711ad7e78c3483d1b57adfae6f6ff040b107bf963d93ba2d9a
- SHA512
  
  f34bb59c7a2d99e2c1ec3fb87840c8836fea916b83f662ad53561627cc19fa194dbef436f9f68906360bb5b0d6a7eecc9224e0aac408a879b44342a9744bff90
- SSDEEP
  
  6144:4bhBc0LJXYe7GJPuYWRpoQQ0kXFCEM05p:4VBndXI3AdkXio
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan