smokeloader | 70a92bd66a34a60fdb228208dfc6b855be1114816f7a5fa8e64886b00fd53d13 | Triage

Sharing

General

Target

file.exe
Size

148KB
Sample

221127-fhdwbsee21
MD5

164abeb1f93c7f19bd8eaa709e6502b9
SHA1

1286192a841dc652437295c864eeef21179afe18
SHA256

70a92bd66a34a60fdb228208dfc6b855be1114816f7a5fa8e64886b00fd53d13
SHA512

8da1fda149830061f98f6b5b06b5b2d44e01fc3739e4f4d835575145f4a5ffd6dbe702c18c56840ac5bea4681727d14171fe92cbef977a15eb481f5d1c97795e
SSDEEP

3072:eHTzU0DzjnzJCB5VgFE20Eh8/eE02PYikPBILa6q:utzzzJuveEtLal

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  148KB
- MD5
  
  164abeb1f93c7f19bd8eaa709e6502b9
- SHA1
  
  1286192a841dc652437295c864eeef21179afe18
- SHA256
  
  70a92bd66a34a60fdb228208dfc6b855be1114816f7a5fa8e64886b00fd53d13
- SHA512
  
  8da1fda149830061f98f6b5b06b5b2d44e01fc3739e4f4d835575145f4a5ffd6dbe702c18c56840ac5bea4681727d14171fe92cbef977a15eb481f5d1c97795e
- SSDEEP
  
  3072:eHTzU0DzjnzJCB5VgFE20Eh8/eE02PYikPBILa6q:utzzzJuveEtLal
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan