smokeloader | 53ca481030a02d4d7ee008478c22d7aaa64c0d8c8020fe0ecff7ebdeb52fe1fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53ca481030a02d4d7ee008478c22d7aaa64c0d8c8020fe0ecff7ebdeb52fe1fc
Size

349KB
Sample

221202-w8hj7scd98
MD5

0d4f74fb95889e5d9d9e2e73aec4aad4
SHA1

2ede7b93c9ba2ee2ff802d8c20dc84e0bae6f9e5
SHA256

53ca481030a02d4d7ee008478c22d7aaa64c0d8c8020fe0ecff7ebdeb52fe1fc
SHA512

e82883963e540d57d4a573a27a570acd2cfc7801e18ecbdf1336df2d715b2df614e59f771305efa943b4b14668484ba690a981fd5b69b9a8238a8a072d94cb98
SSDEEP

6144:j34IGL1AizkpPBhSw7ozJbWcG6yz+cSkjX5li5KJCRuRjMgU:jolBzk1SwozJbW5+TmJlsKMMRQg

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  53ca481030a02d4d7ee008478c22d7aaa64c0d8c8020fe0ecff7ebdeb52fe1fc
- Size
  
  349KB
- MD5
  
  0d4f74fb95889e5d9d9e2e73aec4aad4
- SHA1
  
  2ede7b93c9ba2ee2ff802d8c20dc84e0bae6f9e5
- SHA256
  
  53ca481030a02d4d7ee008478c22d7aaa64c0d8c8020fe0ecff7ebdeb52fe1fc
- SHA512
  
  e82883963e540d57d4a573a27a570acd2cfc7801e18ecbdf1336df2d715b2df614e59f771305efa943b4b14668484ba690a981fd5b69b9a8238a8a072d94cb98
- SSDEEP
  
  6144:j34IGL1AizkpPBhSw7ozJbWcG6yz+cSkjX5li5KJCRuRjMgU:jolBzk1SwozJbW5+TmJlsKMMRQg
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan