smokeloader | 4fffa53c23724db2b519ef77a8029f9838bc7f190337db0231af256fdd71f581 | Triage

Sharing

General

Target

file.exe
Size

312KB
Sample

221229-tztj1agg3v
MD5

cd67b8b641f6c4ada88632ee177b161d
SHA1

72c73b9d766081ca769ed30c057fc491266e3acf
SHA256

4fffa53c23724db2b519ef77a8029f9838bc7f190337db0231af256fdd71f581
SHA512

3b3f8aa0c12ad9204983dbf66f60bc0beeb6e03a5ab52951bf827ee2d6615a66a1db094b347dd5e2efc628f32aafcfcb984e5a666b6dd35fb75d487c31f3570a
SSDEEP

3072:dNlaLcFMLkk5B06t2eMXp4VdEv89tTHAKUIE7U6QENrOKbIxe01Cz5Mqdqujodd1:dWLciETLpEnTTgKzEw7yIxZ1WqqdS09

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  312KB
- MD5
  
  cd67b8b641f6c4ada88632ee177b161d
- SHA1
  
  72c73b9d766081ca769ed30c057fc491266e3acf
- SHA256
  
  4fffa53c23724db2b519ef77a8029f9838bc7f190337db0231af256fdd71f581
- SHA512
  
  3b3f8aa0c12ad9204983dbf66f60bc0beeb6e03a5ab52951bf827ee2d6615a66a1db094b347dd5e2efc628f32aafcfcb984e5a666b6dd35fb75d487c31f3570a
- SSDEEP
  
  3072:dNlaLcFMLkk5B06t2eMXp4VdEv89tTHAKUIE7U6QENrOKbIxe01Cz5Mqdqujodd1:dWLciETLpEnTTgKzEw7yIxZ1WqqdS09
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan