smokeloader | b482a4f43a26ec16e2f66dbc56c06f1ea0fbfcb78a19eeb0cecc6409fe634ba8 | Triage

Sharing

General

Target

b482a4f43a26ec16e2f66dbc56c06f1ea0fbfcb78a19eeb0cecc6409fe634ba8
Size

210KB
Sample

221103-tc74waedgj
MD5

90da95512cc00da1959a198ac1e4deb1
SHA1

d038d9cb46820529a7f6e17dc9ef58cc7617a69e
SHA256

b482a4f43a26ec16e2f66dbc56c06f1ea0fbfcb78a19eeb0cecc6409fe634ba8
SHA512

eb9256de0aeb9acb1163fc72d88d446d5131778daa4c3ac9c60407c4cbacfd73a6f0f36bf2a778b51c8d37632fca1f2fd332aa46406a753d4bcf5d341741973d
SSDEEP

3072:gVXQEmiLuCjbxLuvVh6sd59xIycsdj+xtI7nhu9YGGEE/bERibsiEOR9JK5mx:gVg1QuCFLuNhzi3IaxtynEY3ERCzD

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  b482a4f43a26ec16e2f66dbc56c06f1ea0fbfcb78a19eeb0cecc6409fe634ba8
- Size
  
  210KB
- MD5
  
  90da95512cc00da1959a198ac1e4deb1
- SHA1
  
  d038d9cb46820529a7f6e17dc9ef58cc7617a69e
- SHA256
  
  b482a4f43a26ec16e2f66dbc56c06f1ea0fbfcb78a19eeb0cecc6409fe634ba8
- SHA512
  
  eb9256de0aeb9acb1163fc72d88d446d5131778daa4c3ac9c60407c4cbacfd73a6f0f36bf2a778b51c8d37632fca1f2fd332aa46406a753d4bcf5d341741973d
- SSDEEP
  
  3072:gVXQEmiLuCjbxLuvVh6sd59xIycsdj+xtI7nhu9YGGEE/bERibsiEOR9JK5mx:gVg1QuCFLuNhzi3IaxtynEY3ERCzD
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan