smokeloader | 68178d989e76588af4863d5f7c815a89177ea28922ec4c41ac621c817b3faa27 | Triage

Sharing

General

Target

68178d989e76588af4863d5f7c815a89177ea28922ec4c41ac621c817b3faa27
Size

350KB
Sample

221203-hfqhfsga9t
MD5

767ca9e8d0fe1d2be1e7760a599ca0d5
SHA1

31bdaace5e80b20a6bec5b400d4349adb1602d4f
SHA256

68178d989e76588af4863d5f7c815a89177ea28922ec4c41ac621c817b3faa27
SHA512

27901432656c402531948c2dd46479d1468713a375c27330b55f590a9af9624daccf924c85a2a19fc9def502e1491b2a5377f694df4723e076146ac0fa1edc85
SSDEEP

6144:a81IODL68CXIcROFfvnhQyJTauRdJzkij8:a23DcXIJFfm2TRdRj

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  68178d989e76588af4863d5f7c815a89177ea28922ec4c41ac621c817b3faa27
- Size
  
  350KB
- MD5
  
  767ca9e8d0fe1d2be1e7760a599ca0d5
- SHA1
  
  31bdaace5e80b20a6bec5b400d4349adb1602d4f
- SHA256
  
  68178d989e76588af4863d5f7c815a89177ea28922ec4c41ac621c817b3faa27
- SHA512
  
  27901432656c402531948c2dd46479d1468713a375c27330b55f590a9af9624daccf924c85a2a19fc9def502e1491b2a5377f694df4723e076146ac0fa1edc85
- SSDEEP
  
  6144:a81IODL68CXIcROFfvnhQyJTauRdJzkij8:a23DcXIJFfm2TRdRj
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan