smokeloader | 73829d73aaf1f0c5b7abd370ca9582cb5e3871fe63cdb2a48290c2757aa0a4d6 | Triage

Sharing

General

Target

88bb31b0f24158122a47b40fceb5cbbe5a2a1ffbee3cb6ff54e1f2d6072986b8
Size

138KB
Sample

221226-3mepraea26
MD5

283eee7746f3e211bed9ac3e75cd2c04
SHA1

7795a81c094108edc9a88d7bce73a4926cd59bec
SHA256

73829d73aaf1f0c5b7abd370ca9582cb5e3871fe63cdb2a48290c2757aa0a4d6
SHA512

f22f4c2a85e6377060174f7a99e874a0090b06f68d5c1af3bef8b06d04059adbd1eccfcc8290b1d095917ab7bcacaf09d421c43df4296301fc03f7dd0d0fe41b
SSDEEP

3072:RXlzV53pc8EnwFcckcZ2Q/hQ08/LrT0wD5lPj3KBckBu9IxAc6fv4nR:plzV53bEnYCi2QhQ08frNlPj6Fu9v34R

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  88bb31b0f24158122a47b40fceb5cbbe5a2a1ffbee3cb6ff54e1f2d6072986b8
- Size
  
  229KB
- MD5
  
  ce92dd89870346bb3c5c92834cc93d95
- SHA1
  
  b2d93a43acb9e9e1d8e5d71bc254fbf97f4e610c
- SHA256
  
  88bb31b0f24158122a47b40fceb5cbbe5a2a1ffbee3cb6ff54e1f2d6072986b8
- SHA512
  
  307ace7651031657cee2722a5604db5d74bb40d00f7d8f14e8717dc03cb622b441da8739fcf34eab05f24a075a10ef0fbccc3d2d88c29fbfd4366f7c1edb474f
- SSDEEP
  
  3072:0W9erLuTeOZj50qwLvjAfsM8thXPaT0jLptiPB+V+Y700:wrLuanfgfsMIyTQHiPB+Vl7l
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2