smokeloader | a57ff712becc577a6414c97dac5c61ca2567127bf0533896eaa6874c07e3d332 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

285KB
Sample

221106-tf7mhsceal
MD5

3993a37920a429f540d76263b393e202
SHA1

1500704ddd6f51de3120449c3be894e93e25ea4f
SHA256

a57ff712becc577a6414c97dac5c61ca2567127bf0533896eaa6874c07e3d332
SHA512

61659a7091d01e99ab959a86a7bbd45104117648ca1e7e24ed4927ac284a27ff87e6c9a523c06fda4d9177b27876d3a10516cb547bcfcd88e803aac05c3c7091
SSDEEP

3072:+8J1iGtNqiRa57lGYhc8220Hlu0BZLRYgyTN9L5y2oVM6oCLh:riLC4bhG20HY0ZGlbLAgEL

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  285KB
- MD5
  
  3993a37920a429f540d76263b393e202
- SHA1
  
  1500704ddd6f51de3120449c3be894e93e25ea4f
- SHA256
  
  a57ff712becc577a6414c97dac5c61ca2567127bf0533896eaa6874c07e3d332
- SHA512
  
  61659a7091d01e99ab959a86a7bbd45104117648ca1e7e24ed4927ac284a27ff87e6c9a523c06fda4d9177b27876d3a10516cb547bcfcd88e803aac05c3c7091
- SSDEEP
  
  3072:+8J1iGtNqiRa57lGYhc8220Hlu0BZLRYgyTN9L5y2oVM6oCLh:riLC4bhG20HY0ZGlbLAgEL
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan