smokeloader | fd2f67b0252135590556d0ecb948db806154d30a503cee579521ce716c8f7835 | Triage

Sharing

General

Target

file.exe
Size

210KB
Sample

221031-gqwa1sacb6
MD5

5969b439e7bbe9157cba83f31ec690f0
SHA1

c8da785fbce898a56cc5851458eeae04aacdce17
SHA256

fd2f67b0252135590556d0ecb948db806154d30a503cee579521ce716c8f7835
SHA512

3cc95b2e80a7206da2e670f82f515d61210e5f99ccb9d9f150c9a16e3383832829cfb0c82768c55c1ecf742af8ca5edef2579583a2776df40464654a9a49d27c
SSDEEP

3072:9sTH6uT1aNM9B/wDLxPp6t2X52eBWdaQIIM5HX6wipEBbrBx:9sBTIemLxPpvsWGw7BbF

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  210KB
- MD5
  
  5969b439e7bbe9157cba83f31ec690f0
- SHA1
  
  c8da785fbce898a56cc5851458eeae04aacdce17
- SHA256
  
  fd2f67b0252135590556d0ecb948db806154d30a503cee579521ce716c8f7835
- SHA512
  
  3cc95b2e80a7206da2e670f82f515d61210e5f99ccb9d9f150c9a16e3383832829cfb0c82768c55c1ecf742af8ca5edef2579583a2776df40464654a9a49d27c
- SSDEEP
  
  3072:9sTH6uT1aNM9B/wDLxPp6t2X52eBWdaQIIM5HX6wipEBbrBx:9sBTIemLxPpvsWGw7BbF
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan