smokeloader | 21d58acb5d87dc2bae937f0dd89523aedeccf79a16877ad0ceaca6c69b0d2a1b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file
Size

286KB
Sample

221030-r3xpqaffgr
MD5

34df6386cda8be253dd7093d7dbb7aa6
SHA1

279883a1719d575d6e130745a9d7a6b04f80ff7a
SHA256

21d58acb5d87dc2bae937f0dd89523aedeccf79a16877ad0ceaca6c69b0d2a1b
SHA512

f1147ef1d3843e9fd5eced90aa204ad1b2bbfdd22cd34149068a73ec2a45cf4c1f24705ca8391f9c0db99c97527c7531f7a5504a0e21e496e9953f30c8e451eb
SSDEEP

3072:lfza8yU7vYLarU+K2U5dz8K2Sx4rl2/Ov7zSnwl2h34XYLySBeQFM/h3:MU7vYLarFK2UwKta8/OHSwkh3YGei

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file
- Size
  
  286KB
- MD5
  
  34df6386cda8be253dd7093d7dbb7aa6
- SHA1
  
  279883a1719d575d6e130745a9d7a6b04f80ff7a
- SHA256
  
  21d58acb5d87dc2bae937f0dd89523aedeccf79a16877ad0ceaca6c69b0d2a1b
- SHA512
  
  f1147ef1d3843e9fd5eced90aa204ad1b2bbfdd22cd34149068a73ec2a45cf4c1f24705ca8391f9c0db99c97527c7531f7a5504a0e21e496e9953f30c8e451eb
- SSDEEP
  
  3072:lfza8yU7vYLarU+K2U5dz8K2Sx4rl2/Ov7zSnwl2h34XYLySBeQFM/h3:MU7vYLarFK2UwKta8/OHSwkh3YGei
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan