smokeloader | c390bb750bf5d8ec0dcfa2b794f0d4fc87ea6753eb403683caaf4a79cd9612dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c390bb750bf5d8ec0dcfa2b794f0d4fc87ea6753eb403683caaf4a79cd9612dc
Size

312KB
Sample

230106-qljabsge37
MD5

f4b1d6494646af7736c70a377cf356c8
SHA1

f79cda4b6a4c011685926d019999a1beed0b214f
SHA256

c390bb750bf5d8ec0dcfa2b794f0d4fc87ea6753eb403683caaf4a79cd9612dc
SHA512

acec81e3ef26e471c54ccda4050c177739a1f56f5826ed71d9d8b353bbf252bf7f1cc48c23922dde128bfe79e9366bf171031dff8aa6dd6a7ecb11f1fcc47aea
SSDEEP

6144:fFL9YJdiQnY/Usi4Ykk8A0VBbdWKQCvo:fFCJdXaYj4Bbpo

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  c390bb750bf5d8ec0dcfa2b794f0d4fc87ea6753eb403683caaf4a79cd9612dc
- Size
  
  312KB
- MD5
  
  f4b1d6494646af7736c70a377cf356c8
- SHA1
  
  f79cda4b6a4c011685926d019999a1beed0b214f
- SHA256
  
  c390bb750bf5d8ec0dcfa2b794f0d4fc87ea6753eb403683caaf4a79cd9612dc
- SHA512
  
  acec81e3ef26e471c54ccda4050c177739a1f56f5826ed71d9d8b353bbf252bf7f1cc48c23922dde128bfe79e9366bf171031dff8aa6dd6a7ecb11f1fcc47aea
- SSDEEP
  
  6144:fFL9YJdiQnY/Usi4Ykk8A0VBbdWKQCvo:fFCJdXaYj4Bbpo
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan