smokeloader | a7c41519be7719b4a240776bd95ed4bb92726f6f19353daf97911564150d51f3 | Triage

Sharing

General

Target

file.exe
Size

188KB
Sample

221124-t1yv4sfd42
MD5

bce19652621848c9b1575e94678be39b
SHA1

b4412ba567e9ed13d71a874decdb5820be0abafe
SHA256

a7c41519be7719b4a240776bd95ed4bb92726f6f19353daf97911564150d51f3
SHA512

da070783eaacedd0ff908d5009366e1e9e197866a3eaebe656d115b55c8ba3589491e13b49bd17aeec440058e5d4264bf0a978857c870162ee2d3710259a9412
SSDEEP

3072:CsKqFN6trBmr+ILxLpgVLl52C4+ILvSae3W8hqUvJ4v0/:AqXdLxLGi9SN3W8hqI

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  188KB
- MD5
  
  bce19652621848c9b1575e94678be39b
- SHA1
  
  b4412ba567e9ed13d71a874decdb5820be0abafe
- SHA256
  
  a7c41519be7719b4a240776bd95ed4bb92726f6f19353daf97911564150d51f3
- SHA512
  
  da070783eaacedd0ff908d5009366e1e9e197866a3eaebe656d115b55c8ba3589491e13b49bd17aeec440058e5d4264bf0a978857c870162ee2d3710259a9412
- SSDEEP
  
  3072:CsKqFN6trBmr+ILxLpgVLl52C4+ILvSae3W8hqUvJ4v0/:AqXdLxLGi9SN3W8hqI
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan