smokeloader | 95d1e48f0a9546ceca2c7e20f6be00339470e4c610db69707b1d15716a52e37a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95d1e48f0a9546ceca2c7e20f6be00339470e4c610db69707b1d15716a52e37a
Size

306KB
Sample

221122-nfjb2aef5z
MD5

7430f308cd858384ec4b1c94160a23b6
SHA1

1528fca6cd399c7e89267d8ccc0e88ac9dd939ab
SHA256

95d1e48f0a9546ceca2c7e20f6be00339470e4c610db69707b1d15716a52e37a
SHA512

5a0c03b7fd0fc77d8f3e837da4bb619428b0b5b384677e51873d91524c4e3ea991ccf121eea42fed01ca1f2b5e0829380a2b91253f1b2abb5f59c36b1f384ddd
SSDEEP

6144:N65vu0VPb5Wb/cSx0Jo22tThsIeGjY6x:yukPbcDcSxp22ZVEM

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  95d1e48f0a9546ceca2c7e20f6be00339470e4c610db69707b1d15716a52e37a
- Size
  
  306KB
- MD5
  
  7430f308cd858384ec4b1c94160a23b6
- SHA1
  
  1528fca6cd399c7e89267d8ccc0e88ac9dd939ab
- SHA256
  
  95d1e48f0a9546ceca2c7e20f6be00339470e4c610db69707b1d15716a52e37a
- SHA512
  
  5a0c03b7fd0fc77d8f3e837da4bb619428b0b5b384677e51873d91524c4e3ea991ccf121eea42fed01ca1f2b5e0829380a2b91253f1b2abb5f59c36b1f384ddd
- SSDEEP
  
  6144:N65vu0VPb5Wb/cSx0Jo22tThsIeGjY6x:yukPbcDcSxp22ZVEM
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan