smokeloader | 97c0ecfc684f31ee88159e4cc94c12e51d18ee0707e493306b2ee7ba92a5953b | Triage

Sharing

General

Target

97c0ecfc684f31ee88159e4cc94c12e51d18ee0707e493306b2ee7ba92a5953b.exe
Size

323KB
Sample

221104-xkfw5sbhbq
MD5

545b34f82ba6d8024557be3a36ea5a87
SHA1

d0643f633e6de8f3ead3dee83dc24f68d17cb857
SHA256

97c0ecfc684f31ee88159e4cc94c12e51d18ee0707e493306b2ee7ba92a5953b
SHA512

3ffded8628ca2d741ea38a3095bf0755420057217ab57a3f180b8d465e540c538903cacc6a1ade0beebedb8d4c58ec97b2e9b31d9aeaf9be50cf88b5ce28d2f5
SSDEEP

6144:6/ELbytxMUoY7FWNhYJ10XeA6jI7ITsq:6/EXyt+UXWgJWXeM7

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  97c0ecfc684f31ee88159e4cc94c12e51d18ee0707e493306b2ee7ba92a5953b.exe
- Size
  
  323KB
- MD5
  
  545b34f82ba6d8024557be3a36ea5a87
- SHA1
  
  d0643f633e6de8f3ead3dee83dc24f68d17cb857
- SHA256
  
  97c0ecfc684f31ee88159e4cc94c12e51d18ee0707e493306b2ee7ba92a5953b
- SHA512
  
  3ffded8628ca2d741ea38a3095bf0755420057217ab57a3f180b8d465e540c538903cacc6a1ade0beebedb8d4c58ec97b2e9b31d9aeaf9be50cf88b5ce28d2f5
- SSDEEP
  
  6144:6/ELbytxMUoY7FWNhYJ10XeA6jI7ITsq:6/EXyt+UXWgJWXeM7
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan