smokeloader | 797cdc66a525d34adbeb416fb7a08d25f9ebd88946424ceab6b1577bd8baef55 | Triage

Sharing

General

Target

file.exe
Size

186KB
Sample

221124-asxhjaad9x
MD5

44d0765aacfbc28d6dee7e523e0bccc2
SHA1

70557a86e2eb6d6c3ef06fd90425020a07cb62b4
SHA256

797cdc66a525d34adbeb416fb7a08d25f9ebd88946424ceab6b1577bd8baef55
SHA512

b91a0c7a63a3b77e1e96b06b210329b656d86ff773edc5ebfa6fe6be4b5d414fffd0ebd1cfae8d8719a8c771177e1b978c2c0a711b64c7a8acbcf3a53ce76c4d
SSDEEP

3072:uAOXsyu5z23jLJVkX9bzk5r8+b16vZwU0chmbVYnyfRyz:YXnjLJVktW167GVYyf

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  186KB
- MD5
  
  44d0765aacfbc28d6dee7e523e0bccc2
- SHA1
  
  70557a86e2eb6d6c3ef06fd90425020a07cb62b4
- SHA256
  
  797cdc66a525d34adbeb416fb7a08d25f9ebd88946424ceab6b1577bd8baef55
- SHA512
  
  b91a0c7a63a3b77e1e96b06b210329b656d86ff773edc5ebfa6fe6be4b5d414fffd0ebd1cfae8d8719a8c771177e1b978c2c0a711b64c7a8acbcf3a53ce76c4d
- SSDEEP
  
  3072:uAOXsyu5z23jLJVkX9bzk5r8+b16vZwU0chmbVYnyfRyz:YXnjLJVktW167GVYyf
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2