smokeloader | e6b178961df02ac33ec07bfbdd212c9f7222367274e6062d2dbae0dd6fe6fc59 | Triage

Sharing

General

Target

e6b178961df02ac33ec07bfbdd212c9f7222367274e6062d2dbae0dd6fe6fc59
Size

186KB
Sample

221123-nssq8shf35
MD5

adef01798f8d88da83ad4da94fb4a162
SHA1

520a9ebdfd717acb86aedbeb7cfe21110c2546f2
SHA256

e6b178961df02ac33ec07bfbdd212c9f7222367274e6062d2dbae0dd6fe6fc59
SHA512

719eaae6a78f36628fe3cdc8c58aa7eaad31b47b8968c9b9c26a4d4cabab55febb43302f0188e8d22bc11bb37dfe47b9bb7de9b0e209bc0360216609625ff3f0
SSDEEP

3072:6ql4GPOZA/CLOKO4vWW/O5MjYwtvw8kKLOs+66icG0JP:9l2LOKO4vht3o66icG0

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  e6b178961df02ac33ec07bfbdd212c9f7222367274e6062d2dbae0dd6fe6fc59
- Size
  
  186KB
- MD5
  
  adef01798f8d88da83ad4da94fb4a162
- SHA1
  
  520a9ebdfd717acb86aedbeb7cfe21110c2546f2
- SHA256
  
  e6b178961df02ac33ec07bfbdd212c9f7222367274e6062d2dbae0dd6fe6fc59
- SHA512
  
  719eaae6a78f36628fe3cdc8c58aa7eaad31b47b8968c9b9c26a4d4cabab55febb43302f0188e8d22bc11bb37dfe47b9bb7de9b0e209bc0360216609625ff3f0
- SSDEEP
  
  3072:6ql4GPOZA/CLOKO4vWW/O5MjYwtvw8kKLOs+66icG0JP:9l2LOKO4vht3o66icG0
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan