smokeloader | b2a72b2178792c70c79405349fcc62aab06834131ff05bf3126901b78d69be7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2a72b2178792c70c79405349fcc62aab06834131ff05bf3126901b78d69be7c.exe
Size

340KB
Sample

221206-avfykaed5t
MD5

7ff3a76a2c882d66d86b562bc7de633f
SHA1

27ae777801871001758ec070ecce45e2294ab178
SHA256

b2a72b2178792c70c79405349fcc62aab06834131ff05bf3126901b78d69be7c
SHA512

67757379eefd384826d1b4e66279cb2af75a78688a88e362239e9681fc02f9e20328f776a5e99a9dea7db215e7f7b2fe160d29f46a77369c53ee6f7c4fd6b632
SSDEEP

6144:EQPCmY4ofgDgQOrkE9WxOFQymlglVhSi88TG1PF:EQPdtE9WxuQyWglvTG

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  b2a72b2178792c70c79405349fcc62aab06834131ff05bf3126901b78d69be7c.exe
- Size
  
  340KB
- MD5
  
  7ff3a76a2c882d66d86b562bc7de633f
- SHA1
  
  27ae777801871001758ec070ecce45e2294ab178
- SHA256
  
  b2a72b2178792c70c79405349fcc62aab06834131ff05bf3126901b78d69be7c
- SHA512
  
  67757379eefd384826d1b4e66279cb2af75a78688a88e362239e9681fc02f9e20328f776a5e99a9dea7db215e7f7b2fe160d29f46a77369c53ee6f7c4fd6b632
- SSDEEP
  
  6144:EQPCmY4ofgDgQOrkE9WxOFQymlglVhSi88TG1PF:EQPdtE9WxuQyWglvTG
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan