smokeloader | a61ebd23b58608d56af545a27ed340357b10552bab3f92044542ad68dabc7076 | Triage

Sharing

General

Target

file.exe
Size

229KB
Sample

221223-jzze5sbc91
MD5

4c0f04e9d74a721d7984e95a4ef58cb8
SHA1

9f83bd5ed30cd5a079e173c9a8525f48ad26936f
SHA256

a61ebd23b58608d56af545a27ed340357b10552bab3f92044542ad68dabc7076
SHA512

8d513fe591be263fe5584a6b59c57ac377cb384022b9aa8d56132a66ddac60c8f59e6e4f88e1c4378c4aecaa7f73c15cddc4d3a1f263d6dd78e19a9baaeac8c0
SSDEEP

3072:nyL6lf5VCS2x6/cZiSjE0FjC6KS49o7u+oukzf8qC6WBkOuRGK:yL6VCS2x6/cZlYiW6KL9oSukL8EpjcK

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  229KB
- MD5
  
  4c0f04e9d74a721d7984e95a4ef58cb8
- SHA1
  
  9f83bd5ed30cd5a079e173c9a8525f48ad26936f
- SHA256
  
  a61ebd23b58608d56af545a27ed340357b10552bab3f92044542ad68dabc7076
- SHA512
  
  8d513fe591be263fe5584a6b59c57ac377cb384022b9aa8d56132a66ddac60c8f59e6e4f88e1c4378c4aecaa7f73c15cddc4d3a1f263d6dd78e19a9baaeac8c0
- SSDEEP
  
  3072:nyL6lf5VCS2x6/cZiSjE0FjC6KS49o7u+oukzf8qC6WBkOuRGK:yL6VCS2x6/cZlYiW6KL9oSukL8EpjcK
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan