smokeloader | e97eee4a59c1b94dfa4b759b89c68d213a2e585496b76b4233aa25079e6793e6 | Triage

Sharing

General

Target

e97eee4a59c1b94dfa4b759b89c68d213a2e585496b76b4233aa25079e6793e6
Size

274KB
Sample

221128-vp2cjafc2y
MD5

813f190675956149cd60c0186c99eada
SHA1

b289b67c7a8b940fd405aa94b1446929101baec6
SHA256

e97eee4a59c1b94dfa4b759b89c68d213a2e585496b76b4233aa25079e6793e6
SHA512

414c0efc127a7683cc9ca83ce1bec2872445217c9badcc4623755a55144abd503436772792958f91ba5e41c14f7b177731c41ffc7a059e65643f4f7c7b2ea6b2
SSDEEP

6144:msSA7L/2WqsSNYe8BDqI5QCTI8N8LVFvg4/FQF:YGL/4ZNYVqyQiMDgSm

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  e97eee4a59c1b94dfa4b759b89c68d213a2e585496b76b4233aa25079e6793e6
- Size
  
  274KB
- MD5
  
  813f190675956149cd60c0186c99eada
- SHA1
  
  b289b67c7a8b940fd405aa94b1446929101baec6
- SHA256
  
  e97eee4a59c1b94dfa4b759b89c68d213a2e585496b76b4233aa25079e6793e6
- SHA512
  
  414c0efc127a7683cc9ca83ce1bec2872445217c9badcc4623755a55144abd503436772792958f91ba5e41c14f7b177731c41ffc7a059e65643f4f7c7b2ea6b2
- SSDEEP
  
  6144:msSA7L/2WqsSNYe8BDqI5QCTI8N8LVFvg4/FQF:YGL/4ZNYVqyQiMDgSm
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan