smokeloader | 7fad3d63a0ceeda158a56bf24c7d139df942f26bcd904c39c85fead2934df2a1 | Triage

Sharing

General

Target

file
Size

285KB
Sample

221105-wnyexsbccj
MD5

6f4c50af40764e40f85bd818f290eb3e
SHA1

7d95ee920cf491c69831a8e377f42325ac5751ba
SHA256

7fad3d63a0ceeda158a56bf24c7d139df942f26bcd904c39c85fead2934df2a1
SHA512

d71cbb66d4a250257f6c9240a822ee7a8893fb0c527208997f46c6a0acf94fcde3a8961af2cfc6b8b74a8fd501a2969d9a22c1ed52b58480d773eed9df9877bc
SSDEEP

3072:x3qCRVAg2t5NNJBfllNuZmEBzdgDSPBwCuYA8PuICAsIx/IUUdwB/ucE:tqK2tNJBgzd3w7tvIxedwB/

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file
- Size
  
  285KB
- MD5
  
  6f4c50af40764e40f85bd818f290eb3e
- SHA1
  
  7d95ee920cf491c69831a8e377f42325ac5751ba
- SHA256
  
  7fad3d63a0ceeda158a56bf24c7d139df942f26bcd904c39c85fead2934df2a1
- SHA512
  
  d71cbb66d4a250257f6c9240a822ee7a8893fb0c527208997f46c6a0acf94fcde3a8961af2cfc6b8b74a8fd501a2969d9a22c1ed52b58480d773eed9df9877bc
- SSDEEP
  
  3072:x3qCRVAg2t5NNJBfllNuZmEBzdgDSPBwCuYA8PuICAsIx/IUUdwB/ucE:tqK2tNJBgzd3w7tvIxedwB/
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan