smokeloader | 7f52b14fbbffaf3925266b62217f988908f182afdd65cf6ef9c4854dbd4d5435 | Triage

Sharing

General

Target

7f52b14fbbffaf3925266b62217f988908f182afdd65cf6ef9c4854dbd4d5435
Size

285KB
Sample

230103-f6rr4adc9t
MD5

92e6862760bde6dbcb43bdc7dedf00e0
SHA1

72c393ff8b75ecf6ca467102571c9f1bf3744d51
SHA256

7f52b14fbbffaf3925266b62217f988908f182afdd65cf6ef9c4854dbd4d5435
SHA512

9bf97d30c544856de7bae1e84f64660b45453e90c58cb2a6fe99aaaaebdf7e8cf7bbd2fa62a879dac5ccf1558693d3918cf8ead101da0877fa31bdfbe96cd43f
SSDEEP

3072:ePqtQrQgqp5631NP8TVCfRia9u32TEGUWOF4nIwvz+2:uqgqml6TVQIf3kx1vS2

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  7f52b14fbbffaf3925266b62217f988908f182afdd65cf6ef9c4854dbd4d5435
- Size
  
  285KB
- MD5
  
  92e6862760bde6dbcb43bdc7dedf00e0
- SHA1
  
  72c393ff8b75ecf6ca467102571c9f1bf3744d51
- SHA256
  
  7f52b14fbbffaf3925266b62217f988908f182afdd65cf6ef9c4854dbd4d5435
- SHA512
  
  9bf97d30c544856de7bae1e84f64660b45453e90c58cb2a6fe99aaaaebdf7e8cf7bbd2fa62a879dac5ccf1558693d3918cf8ead101da0877fa31bdfbe96cd43f
- SSDEEP
  
  3072:ePqtQrQgqp5631NP8TVCfRia9u32TEGUWOF4nIwvz+2:uqgqml6TVQIf3kx1vS2
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan