smokeloader | 94fb88b3c70f5f78e6a422f0f1632bfde96323fdd0b200fb6accc627ab50cc8e | Triage

Sharing

General

Target

611aafacb5692bea7998877903b879bc3d98e7c0812294767beabd6a3bcf2f46
Size

142KB
Sample

221106-fmsv2sfhdl
MD5

b69ad61733537dfcf2db54a5abafa1da
SHA1

1414c747cbf01877f1e2a5cff784d64d812c7cc3
SHA256

94fb88b3c70f5f78e6a422f0f1632bfde96323fdd0b200fb6accc627ab50cc8e
SHA512

662dee219cae958bb7da882f275c2013ced32952427da49dc585b0887378d8550408389cd9eb555e6f662135240e18e67e993fadb1ae5e2f8275719c79a0b263
SSDEEP

3072:lJYIe+jMftMKMKCQYEwTS+pP9zPm2U661TnBIuuegPYwHrqeO+DU4:1ewMftuKJ5wzzm2U6y7auu2wxD1

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  611aafacb5692bea7998877903b879bc3d98e7c0812294767beabd6a3bcf2f46
- Size
  
  286KB
- MD5
  
  29116c618e175df555a2213fd2bd8279
- SHA1
  
  f0e0963dd0db5bdb8b1156e5dc9196f979e9aee5
- SHA256
  
  611aafacb5692bea7998877903b879bc3d98e7c0812294767beabd6a3bcf2f46
- SHA512
  
  fb0d25a9ba172dad1e3dcdc74d64282ab757574e292313952d7101bad855c33dd79fbec37a10cbb70a5bfa9fbb495ece789dc42730c4a01a13ca2ce29ac145d2
- SSDEEP
  
  3072:oyPDHFAYmjmgyixh45EFi2PvH6iccDnTnBIuuegP1ocRqfmE:oqD/mjzLJF7PvHBDn7auu/ocRq
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan