smokeloader | d734f1cb71cc9b8380ae5df1ab1d420e8aa328778b8d1a19dc7829486cf2186f | Triage

Sharing

General

Target

d734f1cb71cc9b8380ae5df1ab1d420e8aa328778b8d1a19dc7829486cf2186f
Size

286KB
Sample

230103-gddkfaac62
MD5

23fb712d25aa8fb227ddca4d6cd3a537
SHA1

2b02b919d0f969f54d4ec53c8806e271c14edbf0
SHA256

d734f1cb71cc9b8380ae5df1ab1d420e8aa328778b8d1a19dc7829486cf2186f
SHA512

275dee1bbcef7a3b3c0e2b7647bc24443546f4ae0ef2ba567e4f1337aaede178fc816df5f8e06ba8cf541c61655ef3bb945b7daefd2f65639d06f8a65aaa8fa8
SSDEEP

3072:7MqJTPgg3Lf5qfQ/TYhA0D3yizQreZXj9ODWYNG5CYed2nUs:Yqz3kfQcaitaqYNoBUs

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  d734f1cb71cc9b8380ae5df1ab1d420e8aa328778b8d1a19dc7829486cf2186f
- Size
  
  286KB
- MD5
  
  23fb712d25aa8fb227ddca4d6cd3a537
- SHA1
  
  2b02b919d0f969f54d4ec53c8806e271c14edbf0
- SHA256
  
  d734f1cb71cc9b8380ae5df1ab1d420e8aa328778b8d1a19dc7829486cf2186f
- SHA512
  
  275dee1bbcef7a3b3c0e2b7647bc24443546f4ae0ef2ba567e4f1337aaede178fc816df5f8e06ba8cf541c61655ef3bb945b7daefd2f65639d06f8a65aaa8fa8
- SSDEEP
  
  3072:7MqJTPgg3Lf5qfQ/TYhA0D3yizQreZXj9ODWYNG5CYed2nUs:Yqz3kfQcaitaqYNoBUs
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan