smokeloader | a28ede8afeb2ac43b84985c279c94c25d001d00a035b82eb2ab1a019c5a6faa8 | Triage

Submit
Reports

Overview

overview

Static

static

a28ede8afe...a8.exe

windows7-x64

a28ede8afe...a8.exe

windows10-2004-x64

Sharing

General

Target

a28ede8afeb2ac43b84985c279c94c25d001d00a035b82eb2ab1a019c5a6faa8
Size

30KB
Sample

221220-rmd8fahh47
MD5

e7c7dd1609c0ae7d9948db9f5cecb2ab
SHA1

f7d951dee4dd309a299f583afbab259d11221a28
SHA256

a28ede8afeb2ac43b84985c279c94c25d001d00a035b82eb2ab1a019c5a6faa8
SHA512

5aa6b52c049ddb96b491e8f9c1657bf992df0cfc7075859e4d91eda3e027d64265ca753b96737717546d7b65c41c4f6a1f9938faa8b0372cf8ec7725e60ce2fd
SSDEEP

768:S172poBiLfK2Ss/2q2P66B9QeytQZAERS:O2mBibK4/2PB9Qr2S

Score

10^/10

smokeloader backdoor collection trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

a28ede8afeb2ac43b84985c279c94c25d001d00a035b82eb2ab1a019c5a6faa8.exe

Resource

win7-20221111-en

smokeloader backdoor trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

a28ede8afeb2ac43b84985c279c94c25d001d00a035b82eb2ab1a019c5a6faa8.exe

Resource

win10v2004-20221111-en

smokeloader backdoor collection trojan

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  a28ede8afeb2ac43b84985c279c94c25d001d00a035b82eb2ab1a019c5a6faa8
- Size
  
  30KB
- MD5
  
  e7c7dd1609c0ae7d9948db9f5cecb2ab
- SHA1
  
  f7d951dee4dd309a299f583afbab259d11221a28
- SHA256
  
  a28ede8afeb2ac43b84985c279c94c25d001d00a035b82eb2ab1a019c5a6faa8
- SHA512
  
  5aa6b52c049ddb96b491e8f9c1657bf992df0cfc7075859e4d91eda3e027d64265ca753b96737717546d7b65c41c4f6a1f9938faa8b0372cf8ec7725e60ce2fd
- SSDEEP
  
  768:S172poBiLfK2Ss/2q2P66B9QeytQZAERS:O2mBibK4/2PB9Qr2S
Score

10^/10

smokeloader backdoor trojan collection
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Executes dropped EXE
- Accesses Microsoft Outlook profiles
  collection
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoorcollectiontrojan

© 2018-2025

Terms | Privacy