smokeloader | 4cda4f1e3f0cefbc77757241ae98f3a0891649dce2a2a5ef8859f24d337bdcc0 | Triage

Sharing

General

Target

4cda4f1e3f0cefbc77757241ae98f3a0891649dce2a2a5ef8859f24d337bdcc0
Size

366KB
Sample

230104-jfnvasab2z
MD5

88c1b8ec4bc2635c5bb83759cbe71c61
SHA1

ad057975a22cbbdafd86f0217d335c14f75fc8d2
SHA256

4cda4f1e3f0cefbc77757241ae98f3a0891649dce2a2a5ef8859f24d337bdcc0
SHA512

60baef7541ff029811687f458fceef328f99efcbce9071105f9ae0b57f4191e60da51250f8406502b725a1b2d29867043503cb5f4bdb945559a08fccc2df0b4d
SSDEEP

6144:degLrSsm+zE3f4y9v1zeB34eUWooxupmLIjT:dRqspzE3f4y9v1z24qooxupmL

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  4cda4f1e3f0cefbc77757241ae98f3a0891649dce2a2a5ef8859f24d337bdcc0
- Size
  
  366KB
- MD5
  
  88c1b8ec4bc2635c5bb83759cbe71c61
- SHA1
  
  ad057975a22cbbdafd86f0217d335c14f75fc8d2
- SHA256
  
  4cda4f1e3f0cefbc77757241ae98f3a0891649dce2a2a5ef8859f24d337bdcc0
- SHA512
  
  60baef7541ff029811687f458fceef328f99efcbce9071105f9ae0b57f4191e60da51250f8406502b725a1b2d29867043503cb5f4bdb945559a08fccc2df0b4d
- SSDEEP
  
  6144:degLrSsm+zE3f4y9v1zeB34eUWooxupmLIjT:dRqspzE3f4y9v1z24qooxupmL
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan