smokeloader | d2561aa506ac04dc6fb360f81c4db1ef1094edda77d3bde56b307c283e4b1a96 | Triage

Sharing

General

Target

d2561aa506ac04dc6fb360f81c4db1ef1094edda77d3bde56b307c283e4b1a96
Size

186KB
Sample

221123-lv4v6scd45
MD5

906f90eff4892764168acf215d3b7851
SHA1

823a2d7efee86dff3649b066b3a5177d5f61578e
SHA256

d2561aa506ac04dc6fb360f81c4db1ef1094edda77d3bde56b307c283e4b1a96
SHA512

82ea36f3900e5244e2628eb67df521d79bc9ee7e007b5996c5d42003778a69688bda61d877bb380e6b16f8f00beea5f8fa88c49cfa3a074f26a17679c27b31eb
SSDEEP

3072:vBkApvi4+txILXQ+IWa8D5MebZ7o676LWjOgy+9Ips+im5:WA1ytOLXQf15QwWjX4W+im5

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  d2561aa506ac04dc6fb360f81c4db1ef1094edda77d3bde56b307c283e4b1a96
- Size
  
  186KB
- MD5
  
  906f90eff4892764168acf215d3b7851
- SHA1
  
  823a2d7efee86dff3649b066b3a5177d5f61578e
- SHA256
  
  d2561aa506ac04dc6fb360f81c4db1ef1094edda77d3bde56b307c283e4b1a96
- SHA512
  
  82ea36f3900e5244e2628eb67df521d79bc9ee7e007b5996c5d42003778a69688bda61d877bb380e6b16f8f00beea5f8fa88c49cfa3a074f26a17679c27b31eb
- SSDEEP
  
  3072:vBkApvi4+txILXQ+IWa8D5MebZ7o676LWjOgy+9Ips+im5:WA1ytOLXQf15QwWjX4W+im5
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan