smokeloader | 32657ecac63ffac320465f23f09e5bff4e311e5de6c558c6b43fa4dd1885528a | Triage

Sharing

General

Target

32657ecac63ffac320465f23f09e5bff4e311e5de6c558c6b43fa4dd1885528a
Size

286KB
Sample

221030-pk9v8aaef4
MD5

40517288bcf846e021a525a1c065f49a
SHA1

ad5d3f37b2c9b44f4f6320877b428fbb5fa0a52c
SHA256

32657ecac63ffac320465f23f09e5bff4e311e5de6c558c6b43fa4dd1885528a
SHA512

1cde4b8d3b91f7a3260069b21750c489c29a43fda850678d7405a5ac02ab664bdc33e9e460f2f141986c330efe432a0227df59e02f31586fd7a2d01931978cfe
SSDEEP

3072:BNGVTcUdvVLiT8KS++d5V+um1dV08UBN3QA73Ms+miw8GZnloM/h3s:bUdvVLiT8KS+0+Z+xx3Ms+miwfGJ

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  32657ecac63ffac320465f23f09e5bff4e311e5de6c558c6b43fa4dd1885528a
- Size
  
  286KB
- MD5
  
  40517288bcf846e021a525a1c065f49a
- SHA1
  
  ad5d3f37b2c9b44f4f6320877b428fbb5fa0a52c
- SHA256
  
  32657ecac63ffac320465f23f09e5bff4e311e5de6c558c6b43fa4dd1885528a
- SHA512
  
  1cde4b8d3b91f7a3260069b21750c489c29a43fda850678d7405a5ac02ab664bdc33e9e460f2f141986c330efe432a0227df59e02f31586fd7a2d01931978cfe
- SSDEEP
  
  3072:BNGVTcUdvVLiT8KS++d5V+um1dV08UBN3QA73Ms+miw8GZnloM/h3s:bUdvVLiT8KS+0+Z+xx3Ms+miwfGJ
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan