smokeloader | 974b8ae531a20676d7bc80cadcbcfd10279c922c8bcec84a53c65ac5403a6ad5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file
Size

217KB
Sample

221107-pqhzpaaafr
MD5

48ff8797395c3285bf8464c0d64db3d3
SHA1

5676eb4d1b3cbeb5427cc09fe84f7cbdbda81b0d
SHA256

974b8ae531a20676d7bc80cadcbcfd10279c922c8bcec84a53c65ac5403a6ad5
SHA512

0880446f30946924740fa04e97fa2a4f858d88873baf3ef0bcd27640e1d97551b8f6b9a558ad0f869f4ba18cf2ed3ec400abd08d525cbaa7423697d73a6e8cbc
SSDEEP

3072:/3Hqjma8ki58+ACLOa5QC561hN5FwB51THOyg3f+kgiJ/XM160lsERu:/3Ym/rtLx5ubwBLTbgvMat

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file
- Size
  
  217KB
- MD5
  
  48ff8797395c3285bf8464c0d64db3d3
- SHA1
  
  5676eb4d1b3cbeb5427cc09fe84f7cbdbda81b0d
- SHA256
  
  974b8ae531a20676d7bc80cadcbcfd10279c922c8bcec84a53c65ac5403a6ad5
- SHA512
  
  0880446f30946924740fa04e97fa2a4f858d88873baf3ef0bcd27640e1d97551b8f6b9a558ad0f869f4ba18cf2ed3ec400abd08d525cbaa7423697d73a6e8cbc
- SSDEEP
  
  3072:/3Hqjma8ki58+ACLOa5QC561hN5FwB51THOyg3f+kgiJ/XM160lsERu:/3Ym/rtLx5ubwBLTbgvMat
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan