smokeloader | ec60d7c1ee2c00f5889df31e33388d07b7954ed83c8506562b2db50751a44003 | Triage

Sharing

General

Target

ec60d7c1ee2c00f5889df31e33388d07b7954ed83c8506562b2db50751a44003
Size

189KB
Sample

221125-kzbjraad8z
MD5

846cdcd5c7ac05d5155cf3f79926aaa9
SHA1

f44e41c696a3fb99f03efdcca95616596993f131
SHA256

ec60d7c1ee2c00f5889df31e33388d07b7954ed83c8506562b2db50751a44003
SHA512

b5c951719371ec99fd1648fa1b479346db55b809b16ae652b8b9a344fca042990631e72b3f62f12e9ec0ae943822dc99b8bc72e194707d761841a95533912835
SSDEEP

3072:0g3Bwr8UyYY+pL8okPI04i5CZZ7j5fWzy2YM4EanX3kRoyfRA:d3+bL8oktW7jEzyVM4EogRA

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  ec60d7c1ee2c00f5889df31e33388d07b7954ed83c8506562b2db50751a44003
- Size
  
  189KB
- MD5
  
  846cdcd5c7ac05d5155cf3f79926aaa9
- SHA1
  
  f44e41c696a3fb99f03efdcca95616596993f131
- SHA256
  
  ec60d7c1ee2c00f5889df31e33388d07b7954ed83c8506562b2db50751a44003
- SHA512
  
  b5c951719371ec99fd1648fa1b479346db55b809b16ae652b8b9a344fca042990631e72b3f62f12e9ec0ae943822dc99b8bc72e194707d761841a95533912835
- SSDEEP
  
  3072:0g3Bwr8UyYY+pL8okPI04i5CZZ7j5fWzy2YM4EanX3kRoyfRA:d3+bL8oktW7jEzyVM4EogRA
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan