smokeloader | 993c4566f31a830d4eaecb303ed2da2b2bb0e96b8ca950f79f6e002ffe3d0245 | Triage

Sharing

General

Target

993c4566f31a830d4eaecb303ed2da2b2bb0e96b8ca950f79f6e002ffe3d0245
Size

167KB
Sample

221125-x5ejtach7z
MD5

29ab6d2b51c9bdf1a30a0f3bb5179244
SHA1

f391814de32aa324cb276465ef3f6a7e134e300b
SHA256

993c4566f31a830d4eaecb303ed2da2b2bb0e96b8ca950f79f6e002ffe3d0245
SHA512

09d8cf718ef0f1ce0d962611d790198f1b2acb70737a5a6cdc5258cef436715b25c4d2a0b720aa68bd3623b60ad8d21e2e7cef10f46a93d7854d9f1d42965b04
SSDEEP

3072:catd0Eg2FZUMnz1S5JJz7DPTLNFEbASaBp:1Tg2LLnzoz7vf1p

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  993c4566f31a830d4eaecb303ed2da2b2bb0e96b8ca950f79f6e002ffe3d0245
- Size
  
  167KB
- MD5
  
  29ab6d2b51c9bdf1a30a0f3bb5179244
- SHA1
  
  f391814de32aa324cb276465ef3f6a7e134e300b
- SHA256
  
  993c4566f31a830d4eaecb303ed2da2b2bb0e96b8ca950f79f6e002ffe3d0245
- SHA512
  
  09d8cf718ef0f1ce0d962611d790198f1b2acb70737a5a6cdc5258cef436715b25c4d2a0b720aa68bd3623b60ad8d21e2e7cef10f46a93d7854d9f1d42965b04
- SSDEEP
  
  3072:catd0Eg2FZUMnz1S5JJz7DPTLNFEbASaBp:1Tg2LLnzoz7vf1p
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan