smokeloader | 8e2e38bec6f01059884e471550d4fbb7d3fba46c6acd0dd6aa006eea5ceaad86 | Triage

Sharing

General

Target

8e2e38bec6f01059884e471550d4fbb7d3fba46c6acd0dd6aa006eea5ceaad86
Size

186KB
Sample

221123-qq6anahf4w
MD5

888dc548217a0fd0cc3c618b7fdeda41
SHA1

7af031a4cd00afd5d22722223a175b371c8e506c
SHA256

8e2e38bec6f01059884e471550d4fbb7d3fba46c6acd0dd6aa006eea5ceaad86
SHA512

4bf7f4e9c5edcb1938d5b297ec6c3b016ed422d6ecaacd2ea7ddf907ad303f2fcf8bd987e0122e89e6974980107fac0a545934a9521fc4450ea5b93697aee82b
SSDEEP

3072:rehYPAOPyHxLZUiWmOGs5BiVBqgQGdzI8UOyelVE6Lx45p0y:ChlLZUiZ3VBqB5626O5N

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  8e2e38bec6f01059884e471550d4fbb7d3fba46c6acd0dd6aa006eea5ceaad86
- Size
  
  186KB
- MD5
  
  888dc548217a0fd0cc3c618b7fdeda41
- SHA1
  
  7af031a4cd00afd5d22722223a175b371c8e506c
- SHA256
  
  8e2e38bec6f01059884e471550d4fbb7d3fba46c6acd0dd6aa006eea5ceaad86
- SHA512
  
  4bf7f4e9c5edcb1938d5b297ec6c3b016ed422d6ecaacd2ea7ddf907ad303f2fcf8bd987e0122e89e6974980107fac0a545934a9521fc4450ea5b93697aee82b
- SSDEEP
  
  3072:rehYPAOPyHxLZUiWmOGs5BiVBqgQGdzI8UOyelVE6Lx45p0y:ChlLZUiZ3VBqB5626O5N
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Downloads MZ/PE file
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan