smokeloader | 01133b1ba174ac50eb0abfb99e167bcd23f5339670c52a715611c50f6d893b16 | Triage

Sharing

General

Target

01133b1ba174ac50eb0abfb99e167bcd23f5339670c52a715611c50f6d893b16
Size

193KB
Sample

230204-r7l4sade77
MD5

84153d8aeef201672c88c9c51b3f09a4
SHA1

4fe0c6c8ccaf711fcc1dcd21cf12e6a8b9669217
SHA256

01133b1ba174ac50eb0abfb99e167bcd23f5339670c52a715611c50f6d893b16
SHA512

a3c2758618f60c532a7af2a13e836e82abd81e0353431ad089dfa8d61dbb6f83dacd94117188ceb6edcce55b4f75c2b7f5d9090b77a4b60c784350b0b5d5d326
SSDEEP

3072:fwVw1tCqoZxL2XujwamWY6IR5whqqOnAyFsXs3rCBWQsdHOR1ieytACekCB:fwVDLuuMamX0hPiAyCXsb+WQsdH7jY

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  01133b1ba174ac50eb0abfb99e167bcd23f5339670c52a715611c50f6d893b16
- Size
  
  193KB
- MD5
  
  84153d8aeef201672c88c9c51b3f09a4
- SHA1
  
  4fe0c6c8ccaf711fcc1dcd21cf12e6a8b9669217
- SHA256
  
  01133b1ba174ac50eb0abfb99e167bcd23f5339670c52a715611c50f6d893b16
- SHA512
  
  a3c2758618f60c532a7af2a13e836e82abd81e0353431ad089dfa8d61dbb6f83dacd94117188ceb6edcce55b4f75c2b7f5d9090b77a4b60c784350b0b5d5d326
- SSDEEP
  
  3072:fwVw1tCqoZxL2XujwamWY6IR5whqqOnAyFsXs3rCBWQsdHOR1ieytACekCB:fwVDLuuMamX0hPiAyCXsb+WQsdH7jY
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan