smokeloader | e556cf437e16121da120fb5302ab76cc5d11e6bc2e749e31004915f9ba791761 | Triage

Sharing

General

Target

e556cf437e16121da120fb5302ab76cc5d11e6bc2e749e31004915f9ba791761
Size

273KB
Sample

221205-28qhpsae6w
MD5

d8561b11d67b1ca53dff22409d35c99d
SHA1

acde4e6ad2e0ec8202b998b9d6bf248f2df05758
SHA256

e556cf437e16121da120fb5302ab76cc5d11e6bc2e749e31004915f9ba791761
SHA512

488dddcec48ce31c22c955fa2a7ea4422a48fddfa3dd6d6fdf383cd3dbe940e5e0376dd43b11730859df5acde8f48ef1d02c473058817299d58dfdca291f0809
SSDEEP

3072:7B2XVpXYcmeVjHET8aoWn52i81bXkO5TRQwnkq3JkiVRvJTcp8yDNYgV2qs64C:7BeUmET8ayiEUrWkqZkIDcvNVS

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  e556cf437e16121da120fb5302ab76cc5d11e6bc2e749e31004915f9ba791761
- Size
  
  273KB
- MD5
  
  d8561b11d67b1ca53dff22409d35c99d
- SHA1
  
  acde4e6ad2e0ec8202b998b9d6bf248f2df05758
- SHA256
  
  e556cf437e16121da120fb5302ab76cc5d11e6bc2e749e31004915f9ba791761
- SHA512
  
  488dddcec48ce31c22c955fa2a7ea4422a48fddfa3dd6d6fdf383cd3dbe940e5e0376dd43b11730859df5acde8f48ef1d02c473058817299d58dfdca291f0809
- SSDEEP
  
  3072:7B2XVpXYcmeVjHET8aoWn52i81bXkO5TRQwnkq3JkiVRvJTcp8yDNYgV2qs64C:7BeUmET8ayiEUrWkqZkIDcvNVS
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan