smokeloader | 82cc983e849ae36702d3a0c658cd7a93d1463e03ae296dcc2c0ea77ab92b80f6 | Triage

Sharing

General

Target

file.exe
Size

186KB
Sample

221124-atgtgaae51
MD5

eed590034fc72ac2355c8bd457e45871
SHA1

781b6a9096dae8f9809d6ee42e375f54eb733a39
SHA256

82cc983e849ae36702d3a0c658cd7a93d1463e03ae296dcc2c0ea77ab92b80f6
SHA512

373816a132d4b9ab753f0beed8fedc497a7487a15883285abd1e7ef4dbddfe9154cdbb031b01f4f8507fd778d4c537bc370011cde5c475ffe5416c8ef3b48803
SSDEEP

3072:cA67Ly0SkFUfLDmCBFT/k5Vb1Fjuk17Q5x7UEv5J:27sfLDTBxu76k1c5Njv5J

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  186KB
- MD5
  
  eed590034fc72ac2355c8bd457e45871
- SHA1
  
  781b6a9096dae8f9809d6ee42e375f54eb733a39
- SHA256
  
  82cc983e849ae36702d3a0c658cd7a93d1463e03ae296dcc2c0ea77ab92b80f6
- SHA512
  
  373816a132d4b9ab753f0beed8fedc497a7487a15883285abd1e7ef4dbddfe9154cdbb031b01f4f8507fd778d4c537bc370011cde5c475ffe5416c8ef3b48803
- SSDEEP
  
  3072:cA67Ly0SkFUfLDmCBFT/k5Vb1Fjuk17Q5x7UEv5J:27sfLDTBxu76k1c5Njv5J
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan