smokeloader | fcb8bf2ce545b8d24e1617c6a879d87ef9d7b9dc5e6dcc4400054ce294594b9b | Triage

Sharing

General

Target

fcb8bf2ce545b8d24e1617c6a879d87ef9d7b9dc5e6dcc4400054ce294594b9b
Size

147KB
Sample

221129-ymmcdaba22
MD5

75349c8824845fe0b8e91e2b838d18b8
SHA1

6e8528efe0faadc8beac875b561c9f44454b1e71
SHA256

fcb8bf2ce545b8d24e1617c6a879d87ef9d7b9dc5e6dcc4400054ce294594b9b
SHA512

2a8a713925a454c5511c407988307a920ce4b610e9fd3165a7f7b24a4a64773afdce23193c3972b1bff8091a8b7b727a26caff5550692d13470e418d6c96a95d
SSDEEP

3072:xjDDcnC1Koudpy5Uk50xfUbLq5721zPExH2DUr7Mn:KCsRddPfUbex2hEB2wHMn

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  fcb8bf2ce545b8d24e1617c6a879d87ef9d7b9dc5e6dcc4400054ce294594b9b
- Size
  
  147KB
- MD5
  
  75349c8824845fe0b8e91e2b838d18b8
- SHA1
  
  6e8528efe0faadc8beac875b561c9f44454b1e71
- SHA256
  
  fcb8bf2ce545b8d24e1617c6a879d87ef9d7b9dc5e6dcc4400054ce294594b9b
- SHA512
  
  2a8a713925a454c5511c407988307a920ce4b610e9fd3165a7f7b24a4a64773afdce23193c3972b1bff8091a8b7b727a26caff5550692d13470e418d6c96a95d
- SSDEEP
  
  3072:xjDDcnC1Koudpy5Uk50xfUbLq5721zPExH2DUr7Mn:KCsRddPfUbex2hEB2wHMn
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan