smokeloader | 29259261d8cb33423bce3fe3bc3fc0cb06de16c8ad3f0975384fc997cc16e235 | Triage

Sharing

General

Target

29259261d8cb33423bce3fe3bc3fc0cb06de16c8ad3f0975384fc997cc16e235
Size

286KB
Sample

230103-f1pesahh75
MD5

1cee64171a9d8c56de13fe4eb4e5ef04
SHA1

831e2e71a277e8f531ebc91421952468662d3eef
SHA256

29259261d8cb33423bce3fe3bc3fc0cb06de16c8ad3f0975384fc997cc16e235
SHA512

bc26bfc7bff61ae30d6843cc0d852aa07f79dd6d80dd40e24a1a6a639757aa4336cc67f8dbdf630a68ca397449b60bab061afed33ab5d560c289af4358790dc8
SSDEEP

3072:XSqMCOAg8t5NjApRs+CoaXZZ5BC9dZhhDXrE:CqS8t0sL3ZZafZX

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  29259261d8cb33423bce3fe3bc3fc0cb06de16c8ad3f0975384fc997cc16e235
- Size
  
  286KB
- MD5
  
  1cee64171a9d8c56de13fe4eb4e5ef04
- SHA1
  
  831e2e71a277e8f531ebc91421952468662d3eef
- SHA256
  
  29259261d8cb33423bce3fe3bc3fc0cb06de16c8ad3f0975384fc997cc16e235
- SHA512
  
  bc26bfc7bff61ae30d6843cc0d852aa07f79dd6d80dd40e24a1a6a639757aa4336cc67f8dbdf630a68ca397449b60bab061afed33ab5d560c289af4358790dc8
- SSDEEP
  
  3072:XSqMCOAg8t5NjApRs+CoaXZZ5BC9dZhhDXrE:CqS8t0sL3ZZafZX
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan