smokeloader | 737fbb6723010369a72f1cd22cdaff267d87b06bb81d0eb81b93a34e9c1cc313 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

286KB
Sample

221105-tn3crsaggr
MD5

163a526304ca0b3bb6f012057778c20e
SHA1

d3e7753bc9c1126f72812df51963d0721f98c8c7
SHA256

737fbb6723010369a72f1cd22cdaff267d87b06bb81d0eb81b93a34e9c1cc313
SHA512

232b5297fa4ea037b555e1a8473cfcf905fd6d459028f3e0a646bec08d7310a9938f7a0e0f56e0c34e6ee0bab6184fba723adaa07482d2e9ad08b69e800932cd
SSDEEP

3072:Pql0q50bodgg2lq65aldeWydSwsKxhVzGw1Ml7dQ3ZgdtzMrcW9zJYEB:iOqHT2MZbeWyjsKxLO7dQJgdtgtV

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  286KB
- MD5
  
  163a526304ca0b3bb6f012057778c20e
- SHA1
  
  d3e7753bc9c1126f72812df51963d0721f98c8c7
- SHA256
  
  737fbb6723010369a72f1cd22cdaff267d87b06bb81d0eb81b93a34e9c1cc313
- SHA512
  
  232b5297fa4ea037b555e1a8473cfcf905fd6d459028f3e0a646bec08d7310a9938f7a0e0f56e0c34e6ee0bab6184fba723adaa07482d2e9ad08b69e800932cd
- SSDEEP
  
  3072:Pql0q50bodgg2lq65aldeWydSwsKxhVzGw1Ml7dQ3ZgdtzMrcW9zJYEB:iOqHT2MZbeWyjsKxLO7dQJgdtgtV
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan