smokeloader | e20f9c9bc0e2f77dceb3ef6d6ac485cbeef74c7f414bd7debdd41ad4c1b2c612 | Triage

Sharing

General

Target

file.exe
Size

324KB
Sample

221102-11mleaegaq
MD5

f4c0ed77f99c411c9cdc302add5fda87
SHA1

78968a28b7c9f6d07f06f965df3245bafbce0c36
SHA256

e20f9c9bc0e2f77dceb3ef6d6ac485cbeef74c7f414bd7debdd41ad4c1b2c612
SHA512

bbbaad9db751f0d5ceb2b9779e45032ec750124b027c0ab19a956841b43e598ff6fe9697c4572d5662febe31729b49ef173ac633132ca82df13b836759c6645b
SSDEEP

3072:ML/c+Ls5/YidS5Sibs7wm62gVpuBj6ODc2VYMbmyTFT0MVHV0OuVggjcGkNIVqI/:S/RLseaWSoBVphOXbHFTbVaOG7ITsq

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  324KB
- MD5
  
  f4c0ed77f99c411c9cdc302add5fda87
- SHA1
  
  78968a28b7c9f6d07f06f965df3245bafbce0c36
- SHA256
  
  e20f9c9bc0e2f77dceb3ef6d6ac485cbeef74c7f414bd7debdd41ad4c1b2c612
- SHA512
  
  bbbaad9db751f0d5ceb2b9779e45032ec750124b027c0ab19a956841b43e598ff6fe9697c4572d5662febe31729b49ef173ac633132ca82df13b836759c6645b
- SSDEEP
  
  3072:ML/c+Ls5/YidS5Sibs7wm62gVpuBj6ODc2VYMbmyTFT0MVHV0OuVggjcGkNIVqI/:S/RLseaWSoBVphOXbHFTbVaOG7ITsq
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan