smokeloader | fc32c4ded0c99306f7e2971b7e215c7cfdb623db902bf1576c4a1bd7f2666421 | Triage

Sharing

General

Target

file.exe
Size

274KB
Sample

221205-vsktysaa28
MD5

eee5a97ead7c60f861bfc4fe339c65c4
SHA1

5eec6e7199ed835b6386a4f5ef46a4b525acafd5
SHA256

fc32c4ded0c99306f7e2971b7e215c7cfdb623db902bf1576c4a1bd7f2666421
SHA512

e5f45ccf181dc008ded6c41399eb3247e72db0236c5d109f3fe4bb140736e8f3b399943bfcbfcf53bfe7361ef877f32eb8fad1f4632998475e690c47503d6a13
SSDEEP

3072:JWXVttrXYynUyN7fsMXPOWv5ZdvRh47I9Ay9rxIQ3DnhiVRvJTcp9sGYgV2qs646:J+hxsMXPfNR2I76QDhIDcDVS

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  274KB
- MD5
  
  eee5a97ead7c60f861bfc4fe339c65c4
- SHA1
  
  5eec6e7199ed835b6386a4f5ef46a4b525acafd5
- SHA256
  
  fc32c4ded0c99306f7e2971b7e215c7cfdb623db902bf1576c4a1bd7f2666421
- SHA512
  
  e5f45ccf181dc008ded6c41399eb3247e72db0236c5d109f3fe4bb140736e8f3b399943bfcbfcf53bfe7361ef877f32eb8fad1f4632998475e690c47503d6a13
- SSDEEP
  
  3072:JWXVttrXYynUyN7fsMXPOWv5ZdvRh47I9Ay9rxIQ3DnhiVRvJTcp9sGYgV2qs646:J+hxsMXPfNR2I76QDhIDcDVS
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan