smokeloader | f3d6ae3f3e6f54bf4b9e34b7a39f3123dd69b87f4e0462dd4e8304791f2ac1f0 | Triage

Sharing

General

Target

f3d6ae3f3e6f54bf4b9e34b7a39f3123dd69b87f4e0462dd4e8304791f2ac1f0
Size

285KB
Sample

230103-ge1rcsdf2x
MD5

cbd62ba3193d542e9b824acf51b9981d
SHA1

cc3a26c55c1f153508215b07c96ebd9653a304e5
SHA256

f3d6ae3f3e6f54bf4b9e34b7a39f3123dd69b87f4e0462dd4e8304791f2ac1f0
SHA512

e2757ff50050e570d284662b4a38dccc71deb53a8dc91d28d640c3cc6811dd45f8128785656dbbfdc35be457373ee0ef6536a9c3ec4364daf5d6d8cef945a228
SSDEEP

3072:WhquUUgg2O5qnNoNYeFh3Gmf0BP/BIFptqabn6p/IhcfcrEjUs:sqs2NnaCmFGC08LtqC4whtDs

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  f3d6ae3f3e6f54bf4b9e34b7a39f3123dd69b87f4e0462dd4e8304791f2ac1f0
- Size
  
  285KB
- MD5
  
  cbd62ba3193d542e9b824acf51b9981d
- SHA1
  
  cc3a26c55c1f153508215b07c96ebd9653a304e5
- SHA256
  
  f3d6ae3f3e6f54bf4b9e34b7a39f3123dd69b87f4e0462dd4e8304791f2ac1f0
- SHA512
  
  e2757ff50050e570d284662b4a38dccc71deb53a8dc91d28d640c3cc6811dd45f8128785656dbbfdc35be457373ee0ef6536a9c3ec4364daf5d6d8cef945a228
- SSDEEP
  
  3072:WhquUUgg2O5qnNoNYeFh3Gmf0BP/BIFptqabn6p/IhcfcrEjUs:sqs2NnaCmFGC08LtqC4whtDs
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan