smokeloader | a734e22495a70d0047306a6e86663e838c252a2db5b6f8750c4b62aa3c30fa81 | Triage

Sharing

General

Target

a734e22495a70d0047306a6e86663e838c252a2db5b6f8750c4b62aa3c30fa81
Size

320KB
Sample

221101-v5la9aefgm
MD5

4869870035a733408a376c328dad5b61
SHA1

ff02f914cbd2c95ccb92453135e483ad29a67c74
SHA256

a734e22495a70d0047306a6e86663e838c252a2db5b6f8750c4b62aa3c30fa81
SHA512

fe27cbc2aa68e26efa497833183aa426380b0cafc6e970c292afba6937a3c0cda257b45062f8531b397fec8b0529d619da2f7b8f6b96f2b857bdbe711d8ac4b1
SSDEEP

6144:UZY8Sm/7CE9efk8CcpacX/dzO+cf7ITsqB:UZYg/pYMfcUc4d7

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  a734e22495a70d0047306a6e86663e838c252a2db5b6f8750c4b62aa3c30fa81
- Size
  
  320KB
- MD5
  
  4869870035a733408a376c328dad5b61
- SHA1
  
  ff02f914cbd2c95ccb92453135e483ad29a67c74
- SHA256
  
  a734e22495a70d0047306a6e86663e838c252a2db5b6f8750c4b62aa3c30fa81
- SHA512
  
  fe27cbc2aa68e26efa497833183aa426380b0cafc6e970c292afba6937a3c0cda257b45062f8531b397fec8b0529d619da2f7b8f6b96f2b857bdbe711d8ac4b1
- SSDEEP
  
  6144:UZY8Sm/7CE9efk8CcpacX/dzO+cf7ITsqB:UZYg/pYMfcUc4d7
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan