smokeloader | ef6888d22355aa36b53c577652abeff4a19bfd92319c324be7327dfcebc70ed5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef6888d22355aa36b53c577652abeff4a19bfd92319c324be7327dfcebc70ed5
Size

347KB
Sample

230103-genrssde81
MD5

b52786f3bcb0080a0bbc4ad115d4eb45
SHA1

25c371417f617474727f6e140efdb00f71a0f87f
SHA256

ef6888d22355aa36b53c577652abeff4a19bfd92319c324be7327dfcebc70ed5
SHA512

133e304252267410d42010b2337ba35fd9a4730c914a1ba37d5469b8b745364bbcb7e4f21aa13ae2c3ada40437376228eb736a8803d9f2a458d0dc655cab7c57
SSDEEP

6144:18qEE5m1SVR4YdwDn3bKfGjSBQGAlc7d:mqzo1WR4fD3bBuBQx

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  ef6888d22355aa36b53c577652abeff4a19bfd92319c324be7327dfcebc70ed5
- Size
  
  347KB
- MD5
  
  b52786f3bcb0080a0bbc4ad115d4eb45
- SHA1
  
  25c371417f617474727f6e140efdb00f71a0f87f
- SHA256
  
  ef6888d22355aa36b53c577652abeff4a19bfd92319c324be7327dfcebc70ed5
- SHA512
  
  133e304252267410d42010b2337ba35fd9a4730c914a1ba37d5469b8b745364bbcb7e4f21aa13ae2c3ada40437376228eb736a8803d9f2a458d0dc655cab7c57
- SSDEEP
  
  6144:18qEE5m1SVR4YdwDn3bKfGjSBQGAlc7d:mqzo1WR4fD3bBuBQx
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan