smokeloader | d287166d28f220c90449e317d05adbb24e156026a72b5072db0d15b241b76afe | Triage

Sharing

General

Target

file.exe
Size

187KB
Sample

221123-zw6m2sea33
MD5

16888a9243c0b4f8059a010bc289f41b
SHA1

bfaef8e208df1317190e15816f9e3ca5b37a96e7
SHA256

d287166d28f220c90449e317d05adbb24e156026a72b5072db0d15b241b76afe
SHA512

42d929a08c4d759b47d737f4716be8a65011e561e14bc28ee85a16c0a8d2b7ea0be59bfbebe7ec0ef1526b734717791ff528c2988e4846dfd020730fc9425d09
SSDEEP

3072:KIT1bV8Bc+6LD8+fEIj5KQcdSepLr1/ivLgMcIHQzJXRizhLk:PTg6LD8sr6Lr1/0WlIl

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  187KB
- MD5
  
  16888a9243c0b4f8059a010bc289f41b
- SHA1
  
  bfaef8e208df1317190e15816f9e3ca5b37a96e7
- SHA256
  
  d287166d28f220c90449e317d05adbb24e156026a72b5072db0d15b241b76afe
- SHA512
  
  42d929a08c4d759b47d737f4716be8a65011e561e14bc28ee85a16c0a8d2b7ea0be59bfbebe7ec0ef1526b734717791ff528c2988e4846dfd020730fc9425d09
- SSDEEP
  
  3072:KIT1bV8Bc+6LD8+fEIj5KQcdSepLr1/ivLgMcIHQzJXRizhLk:PTg6LD8sr6Lr1/0WlIl
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2