smokeloader | e1a2abca383c69f6fa18e582a0df5bfd1521ce20bed7281958ccb6610ad3c99c | Triage

Sharing

General

Target

e1a2abca383c69f6fa18e582a0df5bfd1521ce20bed7281958ccb6610ad3c99c
Size

191KB
Sample

221201-3ndtvafg7w
MD5

4457e07508d85555d72ff6f1e9743bcf
SHA1

3d273f80f33421971877bdc270f186d712ca7f80
SHA256

e1a2abca383c69f6fa18e582a0df5bfd1521ce20bed7281958ccb6610ad3c99c
SHA512

25db60d9abab9a4a4b88f6931da4d2b5d304eb6d9a3ae50ff5aebbe69d3ee04d27215d3d926c23272e0a277de80ccad4cb383f4f67bfb145dfcb5aa6103340c5
SSDEEP

3072:CBYkRtKffKuI5IpKrTQX5GGeMMPVruLlRs9E3AZxpR/tBl1L:NfKKKrMplUTvpbP1L

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  e1a2abca383c69f6fa18e582a0df5bfd1521ce20bed7281958ccb6610ad3c99c
- Size
  
  191KB
- MD5
  
  4457e07508d85555d72ff6f1e9743bcf
- SHA1
  
  3d273f80f33421971877bdc270f186d712ca7f80
- SHA256
  
  e1a2abca383c69f6fa18e582a0df5bfd1521ce20bed7281958ccb6610ad3c99c
- SHA512
  
  25db60d9abab9a4a4b88f6931da4d2b5d304eb6d9a3ae50ff5aebbe69d3ee04d27215d3d926c23272e0a277de80ccad4cb383f4f67bfb145dfcb5aa6103340c5
- SSDEEP
  
  3072:CBYkRtKffKuI5IpKrTQX5GGeMMPVruLlRs9E3AZxpR/tBl1L:NfKKKrMplUTvpbP1L
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan