smokeloader | ffab8aab6b81c2dc1c937a70ff78b47b8054af2388d0fa29824c6ee57bc3a66b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffab8aab6b81c2dc1c937a70ff78b47b8054af2388d0fa29824c6ee57bc3a66b
Size

349KB
Sample

221202-yxpv9aac66
MD5

74340318df695dc8e41ac61cc992d24c
SHA1

d0fb244a9d7e554ac88a0e62d92fca8a9d9c9567
SHA256

ffab8aab6b81c2dc1c937a70ff78b47b8054af2388d0fa29824c6ee57bc3a66b
SHA512

65bd8b9ab6ede7479ed31acf7e3c8857779639731f4a2487a41677ade34b13e343f8d4639b1c8b2b5baaa57639e10cbbf8ee378e9a48562bfc123ae845b95111
SSDEEP

6144:xUxnIZ6L3sxePGRZAOc6PJiRG2zgVm8ekMxJrmsuRjMgUu:xcY6UePDC2zhkarIRQg

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  ffab8aab6b81c2dc1c937a70ff78b47b8054af2388d0fa29824c6ee57bc3a66b
- Size
  
  349KB
- MD5
  
  74340318df695dc8e41ac61cc992d24c
- SHA1
  
  d0fb244a9d7e554ac88a0e62d92fca8a9d9c9567
- SHA256
  
  ffab8aab6b81c2dc1c937a70ff78b47b8054af2388d0fa29824c6ee57bc3a66b
- SHA512
  
  65bd8b9ab6ede7479ed31acf7e3c8857779639731f4a2487a41677ade34b13e343f8d4639b1c8b2b5baaa57639e10cbbf8ee378e9a48562bfc123ae845b95111
- SSDEEP
  
  6144:xUxnIZ6L3sxePGRZAOc6PJiRG2zgVm8ekMxJrmsuRjMgUu:xcY6UePDC2zhkarIRQg
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan