smokeloader | 9caa09c05538d36e5498775f0291c4c44c893a96dff07cf27257930288b38472 | Triage

Sharing

General

Target

file.exe
Size

320KB
Sample

221206-g92xxafb71
MD5

358c190a4987765cd80fbdac29da3ced
SHA1

3abfd5446169a85446ef8b23cfe73a35bfdf9e21
SHA256

9caa09c05538d36e5498775f0291c4c44c893a96dff07cf27257930288b38472
SHA512

4d51d70e3663de93df957c298d4dccb227674b0d1d9ce8ff5e9e150628697763a1c9ee736cf5a55a37f0501121696f1de091a199491673654da078bc707710b6
SSDEEP

3072:i08XpGWT8yTXQqnLLftJJLg5aOxNYMjMtAqmKylcIi5iq4qwjxbEMJds0Svt:At8yT/LLVJJLTmYMjMtAqZlIQi59EcF

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  320KB
- MD5
  
  358c190a4987765cd80fbdac29da3ced
- SHA1
  
  3abfd5446169a85446ef8b23cfe73a35bfdf9e21
- SHA256
  
  9caa09c05538d36e5498775f0291c4c44c893a96dff07cf27257930288b38472
- SHA512
  
  4d51d70e3663de93df957c298d4dccb227674b0d1d9ce8ff5e9e150628697763a1c9ee736cf5a55a37f0501121696f1de091a199491673654da078bc707710b6
- SSDEEP
  
  3072:i08XpGWT8yTXQqnLLftJJLg5aOxNYMjMtAqmKylcIi5iq4qwjxbEMJds0Svt:At8yT/LLVJJLTmYMjMtAqZlIQi59EcF
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan