smokeloader | 3032d0d591320629c860c681dbb3c60b0bde32c526da04b36717c1e8f3568148 | Triage

Sharing

General

Target

3032d0d591320629c860c681dbb3c60b0bde32c526da04b36717c1e8f3568148.exe
Size

342KB
Sample

221206-cdxk4aba9x
MD5

a98a68554b918fed91ca2e22122d411b
SHA1

080ae3a4c3e0adc67f4e0d0703a7e6e3d2490403
SHA256

3032d0d591320629c860c681dbb3c60b0bde32c526da04b36717c1e8f3568148
SHA512

45ab04e0ff670b56d43e37dc8b574c1850ae4e2fe1048226eb902802c7b8be2be6aab4272de77eeb1f8d926cd456caadac6008a84e580b0897ebaeae88712f3e
SSDEEP

6144:sDZiC0qqfrvMmqJpGXVrymlgl3AKG1PF:sDZiC7XGlryWgl37G

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  3032d0d591320629c860c681dbb3c60b0bde32c526da04b36717c1e8f3568148.exe
- Size
  
  342KB
- MD5
  
  a98a68554b918fed91ca2e22122d411b
- SHA1
  
  080ae3a4c3e0adc67f4e0d0703a7e6e3d2490403
- SHA256
  
  3032d0d591320629c860c681dbb3c60b0bde32c526da04b36717c1e8f3568148
- SHA512
  
  45ab04e0ff670b56d43e37dc8b574c1850ae4e2fe1048226eb902802c7b8be2be6aab4272de77eeb1f8d926cd456caadac6008a84e580b0897ebaeae88712f3e
- SSDEEP
  
  6144:sDZiC0qqfrvMmqJpGXVrymlgl3AKG1PF:sDZiC7XGlryWgl37G
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan