smokeloader | 33801e4479a4c56dcdbeb584b22c7dc5fd95192453cee8fe380d1d57f2c076e9 | Triage

Sharing

General

Target

19f9f3ac862be9429ffbe1a9020f957dc70471ceb51d7df5765d57f3a8b922bf
Size

202KB
Sample

221220-g57btsgh46
MD5

3be1ad9fc73ebc8160a188ce844abe47
SHA1

143e60691b006d938fc6e2babe4ea54983544fbc
SHA256

33801e4479a4c56dcdbeb584b22c7dc5fd95192453cee8fe380d1d57f2c076e9
SHA512

9386bd24e009f221aac665e6ee80d9f47f0731634fb1a0a2846145fc83ffe0e8a30ce2980d75e5444e5dedb887a7d6d2cda27ac889d01809751609e1bb1d2449
SSDEEP

3072:zPB3YivlUQ9pZ7icnoD9TZNunwCKo/d01r4uleeF8vU0J+WRw+1t:zR7e3cna99N6w9oF01rPsc0J+ywot

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  19f9f3ac862be9429ffbe1a9020f957dc70471ceb51d7df5765d57f3a8b922bf
- Size
  
  303KB
- MD5
  
  00876a9b7e7c38a919e992b1848ed811
- SHA1
  
  96f1d621e61280704bc9b99e16c3360696dcd854
- SHA256
  
  19f9f3ac862be9429ffbe1a9020f957dc70471ceb51d7df5765d57f3a8b922bf
- SHA512
  
  c88fcaa4dfefa0ebe4420858da78e1333b973c737fadfb943bbd7b0dd63a7760afd6e24b7bd40a968513e4b4158cef2a8820f9087d19bf3b1245c4d8c8a3dbe3
- SSDEEP
  
  6144:5QLuIUoGymkVWcna99N6pfpqyx0dz+3ng+E49HwchLP3i:iJUoRtVWeao9pqC0FwnVZH9P3
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan