smokeloader | fcb413da33ada7309bd3fc2a76e586835b382b9f8dc6e4e40596f88d7739a79b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcb413da33ada7309bd3fc2a76e586835b382b9f8dc6e4e40596f88d7739a79b
Size

348KB
Sample

221202-xew16sdb23
MD5

a3601156bc0853484aed61d8bcd5b9b9
SHA1

92c8209544df1d4c8881363fc5cb3c00b299729d
SHA256

fcb413da33ada7309bd3fc2a76e586835b382b9f8dc6e4e40596f88d7739a79b
SHA512

dfcc4787fdf79678e10aa9d221d9e271bdcebefc5b16fd9b315e999b0c932ab8fcae437d150198859c0764a21aba55ac93633afd599339f88a6474d144cdf18d
SSDEEP

6144:JMdwIlLkAFC3pPB2xbV/0Rs8pG/fuRjMgU:JPutC3m5Ks8suRQg

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  fcb413da33ada7309bd3fc2a76e586835b382b9f8dc6e4e40596f88d7739a79b
- Size
  
  348KB
- MD5
  
  a3601156bc0853484aed61d8bcd5b9b9
- SHA1
  
  92c8209544df1d4c8881363fc5cb3c00b299729d
- SHA256
  
  fcb413da33ada7309bd3fc2a76e586835b382b9f8dc6e4e40596f88d7739a79b
- SHA512
  
  dfcc4787fdf79678e10aa9d221d9e271bdcebefc5b16fd9b315e999b0c932ab8fcae437d150198859c0764a21aba55ac93633afd599339f88a6474d144cdf18d
- SSDEEP
  
  6144:JMdwIlLkAFC3pPB2xbV/0Rs8pG/fuRjMgU:JPutC3m5Ks8suRQg
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan