smokeloader | c0b3e8361edf417d689ce08ed889646d0d396bcaa8a52feb1e5dbb6fd39c7432 | Triage

Sharing

General

Target

c0b3e8361edf417d689ce08ed889646d0d396bcaa8a52feb1e5dbb6fd39c7432
Size

186KB
Sample

221123-jzh36abf4s
MD5

a1459c570face3f3eae78496ac288a06
SHA1

6169a9da842c46f53423d1ffc5fed891824664e7
SHA256

c0b3e8361edf417d689ce08ed889646d0d396bcaa8a52feb1e5dbb6fd39c7432
SHA512

295df76711999f63d652745af7f21b68d534fe2b90aa1d25cfa38755f2d86d982d7d4486615f4baaa030c8d6fa2df05a4e547a6df7059b7cf4dfb510203c0b3e
SSDEEP

3072:3BIElgxVBhL8JafGW8wD52poHtv8YxhOAYi0cF73VTBCBkZ:aEyDLgafG/nwkDLFcZ5A2

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  c0b3e8361edf417d689ce08ed889646d0d396bcaa8a52feb1e5dbb6fd39c7432
- Size
  
  186KB
- MD5
  
  a1459c570face3f3eae78496ac288a06
- SHA1
  
  6169a9da842c46f53423d1ffc5fed891824664e7
- SHA256
  
  c0b3e8361edf417d689ce08ed889646d0d396bcaa8a52feb1e5dbb6fd39c7432
- SHA512
  
  295df76711999f63d652745af7f21b68d534fe2b90aa1d25cfa38755f2d86d982d7d4486615f4baaa030c8d6fa2df05a4e547a6df7059b7cf4dfb510203c0b3e
- SSDEEP
  
  3072:3BIElgxVBhL8JafGW8wD52poHtv8YxhOAYi0cF73VTBCBkZ:aEyDLgafG/nwkDLFcZ5A2
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan