smokeloader | cc1fa65046f4f7db740e425ca282fa56c66cf1f4e8e07be56cffb7a35e9b9820 | Triage

Sharing

General

Target

file.exe
Size

332KB
Sample

221102-ysnsdsbdh6
MD5

521ef2b23c09d274b2253ebec92758ac
SHA1

87f9b63e10fe4e76116551c4dbda480d05b60f8a
SHA256

cc1fa65046f4f7db740e425ca282fa56c66cf1f4e8e07be56cffb7a35e9b9820
SHA512

99dd12ae4e9b03b8900abcac60f10a51f724968d7ba8054697e4ce874857a4e4e3aaad42f8711470582871cb3fd0ac42ec66ca71aa1914f3c6d1fdc13558bd56
SSDEEP

6144:fkqarLB+KJs+T/Rd1HGFgYCxussWBnP7ITsq:fkq8xK+T/Rn4gvXsWd7

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  332KB
- MD5
  
  521ef2b23c09d274b2253ebec92758ac
- SHA1
  
  87f9b63e10fe4e76116551c4dbda480d05b60f8a
- SHA256
  
  cc1fa65046f4f7db740e425ca282fa56c66cf1f4e8e07be56cffb7a35e9b9820
- SHA512
  
  99dd12ae4e9b03b8900abcac60f10a51f724968d7ba8054697e4ce874857a4e4e3aaad42f8711470582871cb3fd0ac42ec66ca71aa1914f3c6d1fdc13558bd56
- SSDEEP
  
  6144:fkqarLB+KJs+T/Rd1HGFgYCxussWBnP7ITsq:fkq8xK+T/Rn4gvXsWd7
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan