smokeloader | f0c3c4a76875384cc536d4f018903d69185fb8154e181bf739dfd6260cf2c05a | Triage

Sharing

General

Target

f0c3c4a76875384cc536d4f018903d69185fb8154e181bf739dfd6260cf2c05a
Size

211KB
Sample

221103-zn76xafaf7
MD5

d38f8657298596f3c33904e42e5fe10f
SHA1

4fa2e7b7474defe9b5d7d2fcafbf4bea2093faa2
SHA256

f0c3c4a76875384cc536d4f018903d69185fb8154e181bf739dfd6260cf2c05a
SHA512

63e213ec90fa57e885e67416ab9cfcf647785d10e49c06d795da3fed3fd4ccd1cc9fc537b3afcb135fb10c0b3d84b00f5b39c2142a128e66d1adc01810a6c74b
SSDEEP

3072:0LoDf5vD1coawLGlB/6OJ5aI0CpjjOnt6M09SeJXb+RwIIsx:0LuZpcofLYB/Z0CxTZVKGId

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  f0c3c4a76875384cc536d4f018903d69185fb8154e181bf739dfd6260cf2c05a
- Size
  
  211KB
- MD5
  
  d38f8657298596f3c33904e42e5fe10f
- SHA1
  
  4fa2e7b7474defe9b5d7d2fcafbf4bea2093faa2
- SHA256
  
  f0c3c4a76875384cc536d4f018903d69185fb8154e181bf739dfd6260cf2c05a
- SHA512
  
  63e213ec90fa57e885e67416ab9cfcf647785d10e49c06d795da3fed3fd4ccd1cc9fc537b3afcb135fb10c0b3d84b00f5b39c2142a128e66d1adc01810a6c74b
- SSDEEP
  
  3072:0LoDf5vD1coawLGlB/6OJ5aI0CpjjOnt6M09SeJXb+RwIIsx:0LuZpcofLYB/Z0CxTZVKGId
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan