smokeloader | 435a90a28e91f8a181b51d6d9b6e142e8c99cd5498696fb27977f4898db7192e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

150KB
Sample

221127-mq3yraah49
MD5

7c83a9745d0238cfe05f39d454b382e1
SHA1

5aff2e9b1f3aa6c3d9bbfd131c4271cf284684e1
SHA256

435a90a28e91f8a181b51d6d9b6e142e8c99cd5498696fb27977f4898db7192e
SHA512

5419c490e400b5f7213d9748bd0d53a9c42c106a56ca5c4c87eedd69840347b122c99221c4818f911251f520e5ec725f7994b948f84a0f4ea6717c7a8bf8ca2c
SSDEEP

3072:cdwzuwqCNW/RPZVOJW55Rb3frHFuA7puWsv6W9ugxs4U0EU:tGXRxVOYF3j8A7puBt1xsB

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  150KB
- MD5
  
  7c83a9745d0238cfe05f39d454b382e1
- SHA1
  
  5aff2e9b1f3aa6c3d9bbfd131c4271cf284684e1
- SHA256
  
  435a90a28e91f8a181b51d6d9b6e142e8c99cd5498696fb27977f4898db7192e
- SHA512
  
  5419c490e400b5f7213d9748bd0d53a9c42c106a56ca5c4c87eedd69840347b122c99221c4818f911251f520e5ec725f7994b948f84a0f4ea6717c7a8bf8ca2c
- SSDEEP
  
  3072:cdwzuwqCNW/RPZVOJW55Rb3frHFuA7puWsv6W9ugxs4U0EU:tGXRxVOYF3j8A7puBt1xsB
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan