smokeloader | a827e864fdf2a30cd6060a50bc4d5199075818c245804f1ddb3e66ee2040c3e7 | Triage

Sharing

General

Target

a827e864fdf2a30cd6060a50bc4d5199075818c245804f1ddb3e66ee2040c3e7
Size

147KB
Sample

221127-jxmcssbd68
MD5

b3957dda4bc08c70919b56437c84c991
SHA1

478e0d84b12d251d0a0f15fd56c82f5047d35541
SHA256

a827e864fdf2a30cd6060a50bc4d5199075818c245804f1ddb3e66ee2040c3e7
SHA512

df1b766d4bcacd3f19089acc40ec1e38b072997f1f1d610715c521f16881229218055c6afd0553d5c40cb2e76c39b65b6966e0cf7a32cfa2ed6a388d3d272adf
SSDEEP

3072:Q6y3PGucCoKGE5q4sDm5sojaRzKzYAuI9CYH:0bFD1sDXojaQcCL

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  a827e864fdf2a30cd6060a50bc4d5199075818c245804f1ddb3e66ee2040c3e7
- Size
  
  147KB
- MD5
  
  b3957dda4bc08c70919b56437c84c991
- SHA1
  
  478e0d84b12d251d0a0f15fd56c82f5047d35541
- SHA256
  
  a827e864fdf2a30cd6060a50bc4d5199075818c245804f1ddb3e66ee2040c3e7
- SHA512
  
  df1b766d4bcacd3f19089acc40ec1e38b072997f1f1d610715c521f16881229218055c6afd0553d5c40cb2e76c39b65b6966e0cf7a32cfa2ed6a388d3d272adf
- SSDEEP
  
  3072:Q6y3PGucCoKGE5q4sDm5sojaRzKzYAuI9CYH:0bFD1sDXojaQcCL
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan