smokeloader | 2daf54e20bc8beff2403520d8c534838362474db1507ee4e62388538ed9adca8 | Triage

Sharing

General

Target

2daf54e20bc8beff2403520d8c534838362474db1507ee4e62388538ed9adca8
Size

159KB
Sample

221123-xd5xpahg2x
MD5

6ced4f514d5c01b528ab7201ae72991d
SHA1

50b61ba241e907a576368a9f2217dbf15a8bc265
SHA256

2daf54e20bc8beff2403520d8c534838362474db1507ee4e62388538ed9adca8
SHA512

2e5d8e313ae0ed31518972be710e41f4537855697685599c7d18e903621a4c10d3c78656a64ff1251f015002a0264d50d69e64ea91bab791c1b42f9961c41553
SSDEEP

3072:TjAD3SNdZyz6cVXnLQMNzS5/2MsXYxUTrHNuUegW2QCe3b:gDMyz6cV3LQM1MsXGoI3g1Q

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  2daf54e20bc8beff2403520d8c534838362474db1507ee4e62388538ed9adca8
- Size
  
  159KB
- MD5
  
  6ced4f514d5c01b528ab7201ae72991d
- SHA1
  
  50b61ba241e907a576368a9f2217dbf15a8bc265
- SHA256
  
  2daf54e20bc8beff2403520d8c534838362474db1507ee4e62388538ed9adca8
- SHA512
  
  2e5d8e313ae0ed31518972be710e41f4537855697685599c7d18e903621a4c10d3c78656a64ff1251f015002a0264d50d69e64ea91bab791c1b42f9961c41553
- SSDEEP
  
  3072:TjAD3SNdZyz6cVXnLQMNzS5/2MsXYxUTrHNuUegW2QCe3b:gDMyz6cV3LQM1MsXGoI3g1Q
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan