smokeloader | ac7a97bb9f8ba0d51841a5e097e2f65c81aaf37f7fcef255712125d6e5c8c17b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac7a97bb9f8ba0d51841a5e097e2f65c81aaf37f7fcef255712125d6e5c8c17b
Size

228KB
Sample

221223-l112gabe2w
MD5

2c82e49875743401582512adc8f5b8e2
SHA1

57005ad04ff97af7e2d2058c5c47c7f40cd6dff0
SHA256

ac7a97bb9f8ba0d51841a5e097e2f65c81aaf37f7fcef255712125d6e5c8c17b
SHA512

1259403f50d914a261cd4727a698c2e8a5c89200c76b2ac248abf95faf602f50a80d9e3540bfbc4bbfe4363ea33629c53e23bd24e333798094cd4998c69d2372
SSDEEP

3072:ziLyuvf5U4KsXRuyV6ftud3u+oukzmYXPKnWBkOuRGK:WLr24Td+ukSlnpjcK

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  ac7a97bb9f8ba0d51841a5e097e2f65c81aaf37f7fcef255712125d6e5c8c17b
- Size
  
  228KB
- MD5
  
  2c82e49875743401582512adc8f5b8e2
- SHA1
  
  57005ad04ff97af7e2d2058c5c47c7f40cd6dff0
- SHA256
  
  ac7a97bb9f8ba0d51841a5e097e2f65c81aaf37f7fcef255712125d6e5c8c17b
- SHA512
  
  1259403f50d914a261cd4727a698c2e8a5c89200c76b2ac248abf95faf602f50a80d9e3540bfbc4bbfe4363ea33629c53e23bd24e333798094cd4998c69d2372
- SSDEEP
  
  3072:ziLyuvf5U4KsXRuyV6ftud3u+oukzmYXPKnWBkOuRGK:WLr24Td+ukSlnpjcK
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan