smokeloader | 53e1a94f523533d7f64e610cc6632af475cdfbc01c382b240d7a4e163fe527ef | Triage

Sharing

General

Target

file.exe
Size

300KB
Sample

230106-2jsa1acb54
MD5

a5cbedfc8ba343fc861e4567d76298cb
SHA1

075b717cfb9b5758d4bf8e41fcd5342811e50ed4
SHA256

53e1a94f523533d7f64e610cc6632af475cdfbc01c382b240d7a4e163fe527ef
SHA512

20bacd1947ec7c494922a490328a8eab8a71a2fb3a817946a278abd76036d9edf50dfc943e078935bf59bf1182f1b035f029d906072b43d0bb7ad7c2041b9b62
SSDEEP

6144:VFLJzN4Rq7k5bmiH1Qg0vvnf+A+7Ci0BJ:VFtzNAq7k5qdnf+7CiS

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  300KB
- MD5
  
  a5cbedfc8ba343fc861e4567d76298cb
- SHA1
  
  075b717cfb9b5758d4bf8e41fcd5342811e50ed4
- SHA256
  
  53e1a94f523533d7f64e610cc6632af475cdfbc01c382b240d7a4e163fe527ef
- SHA512
  
  20bacd1947ec7c494922a490328a8eab8a71a2fb3a817946a278abd76036d9edf50dfc943e078935bf59bf1182f1b035f029d906072b43d0bb7ad7c2041b9b62
- SSDEEP
  
  6144:VFLJzN4Rq7k5bmiH1Qg0vvnf+A+7Ci0BJ:VFtzNAq7k5qdnf+7CiS
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan