smokeloader | b5506986a267a21a65777946aa59e621923ed730b7b54a40863b24d59cffa669 | Triage

Sharing

General

Target

b66802254597e15dfa5a99cb3e3e20ebb3152490822f546502cf5b6a65c0be27
Size

105KB
Sample

221130-b4bkwaba7y
MD5

d6beedd085add32db8bfe38e577275cc
SHA1

d07b32572dcf56cfda768c0d8261b3983577f3a4
SHA256

b5506986a267a21a65777946aa59e621923ed730b7b54a40863b24d59cffa669
SHA512

042cadf64386085b4e5af91294e7a9e6f8dad661047527633e0942d1755505d58d78eae5fb160dd7bfc4cdeacb372720a7771c31a124844525f9b1c1f0fb42c2
SSDEEP

3072:OXemTEjBKAGi29PGIQAO4ZxaxK0oy4FpQ6WWbPZVhE:OuoAGi29P0A3Zj7FpO+hQ

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  b66802254597e15dfa5a99cb3e3e20ebb3152490822f546502cf5b6a65c0be27
- Size
  
  147KB
- MD5
  
  ad93de60d031537ab705ca9a4bd3a23f
- SHA1
  
  5d78cb9041017bc796ac50f5fd49105f29e62153
- SHA256
  
  b66802254597e15dfa5a99cb3e3e20ebb3152490822f546502cf5b6a65c0be27
- SHA512
  
  79c02054f74a6c9b19d2f49752955610b1f2a53571f9d939bb5afc28418ea0ebef6c5d31ba7026e1695fe21c54876575545cd9a14da48a664e2bd3f32117a1c8
- SSDEEP
  
  3072:6e1bT4C/G9+cn5JXorUeXMhXYO2sVROKUNm3X:68T4r9+6orf8hXZVRTUNW
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan