smokeloader | 50656c518197fb8c01ad60a0777e6b8e1a2c1a1095e42b3b787bce9e7585d0e9 | Triage

Sharing

General

Target

50656c518197fb8c01ad60a0777e6b8e1a2c1a1095e42b3b787bce9e7585d0e9
Size

195KB
Sample

230203-mxejqsee66
MD5

1294919bc03b7c8c837b6bf2417e7a22
SHA1

f6abc70a2767ea32cfd4b6bca8a09c66d833cead
SHA256

50656c518197fb8c01ad60a0777e6b8e1a2c1a1095e42b3b787bce9e7585d0e9
SHA512

2938d0e3805cf07b48735e3197b62fd2a865d390a0c49a79117a4bc9d1893c0e7b8b6a6c20ffc83657237c763068daa27f55043f84fa5ed21627e329973a5f34
SSDEEP

3072:undXzFeK80+LI8XpWCm5daS0DeNknoDfsVRFKpd4NLixRFocmsi4o327P2XN:und89LI8Xp32t080fVNV69msi12j29

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  50656c518197fb8c01ad60a0777e6b8e1a2c1a1095e42b3b787bce9e7585d0e9
- Size
  
  195KB
- MD5
  
  1294919bc03b7c8c837b6bf2417e7a22
- SHA1
  
  f6abc70a2767ea32cfd4b6bca8a09c66d833cead
- SHA256
  
  50656c518197fb8c01ad60a0777e6b8e1a2c1a1095e42b3b787bce9e7585d0e9
- SHA512
  
  2938d0e3805cf07b48735e3197b62fd2a865d390a0c49a79117a4bc9d1893c0e7b8b6a6c20ffc83657237c763068daa27f55043f84fa5ed21627e329973a5f34
- SSDEEP
  
  3072:undXzFeK80+LI8XpWCm5daS0DeNknoDfsVRFKpd4NLixRFocmsi4o327P2XN:und89LI8Xp32t080fVNV69msi12j29
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan