smokeloader | 8f0652222afead81b7dd875737b2f6a9b2074d376a3cbab0fe0ccee6bade3255 | Triage

Sharing

General

Target

file.exe
Size

273KB
Sample

221206-ek72hshc93
MD5

6b5a9f6f8eb8a86bf9b662adbfa29779
SHA1

e82ada0fe40687bb9b9fa43bb02ee9b8981645c6
SHA256

8f0652222afead81b7dd875737b2f6a9b2074d376a3cbab0fe0ccee6bade3255
SHA512

2a983e3b5a866b3dd6d702e0f874c2f0b66ef6ea538ddd0d010facceed5f95689afffbb765ef676de4242b2a1d1ee16fc24bddc50799cfab0e4ddaa56222b524
SSDEEP

3072:ZZXVmhYLlPATgp6x3WR5yk8O+2ll6cXaz58QirdiVRvJTcp4lURsfYgV2qs64j:Z9XFp6xnVOzllNXaiQihIDcCGRAVS

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  273KB
- MD5
  
  6b5a9f6f8eb8a86bf9b662adbfa29779
- SHA1
  
  e82ada0fe40687bb9b9fa43bb02ee9b8981645c6
- SHA256
  
  8f0652222afead81b7dd875737b2f6a9b2074d376a3cbab0fe0ccee6bade3255
- SHA512
  
  2a983e3b5a866b3dd6d702e0f874c2f0b66ef6ea538ddd0d010facceed5f95689afffbb765ef676de4242b2a1d1ee16fc24bddc50799cfab0e4ddaa56222b524
- SSDEEP
  
  3072:ZZXVmhYLlPATgp6x3WR5yk8O+2ll6cXaz58QirdiVRvJTcp4lURsfYgV2qs64j:Z9XFp6xnVOzllNXaiQihIDcCGRAVS
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan