smokeloader | e3c52701a4e6f27db4476a97879b6781ac6bff224d0982b8ce055ed9a8ea9f60 | Triage

Sharing

General

Target

e3c52701a4e6f27db4476a97879b6781ac6bff224d0982b8ce055ed9a8ea9f60
Size

197KB
Sample

230209-gqrb3afb92
MD5

09a57073477de4a9f6e7fe6d988dd40c
SHA1

0471d70b28def5c5fab8b7d1c81913299450ad99
SHA256

e3c52701a4e6f27db4476a97879b6781ac6bff224d0982b8ce055ed9a8ea9f60
SHA512

8e80d851af436e834715e5412ee6bbaff713e5d90aedd10e796c29868e6808ead60ead0dce22627677f6b8f09cb7342986cb901a20e9786fe5212fcf9bbdd6fc
SSDEEP

3072:VG4OvpSAlIfTLXHHAPWbzd5ycaTFYZJ99lhQ3zqc6KKVEkkLLZyaaLHHJic0:VG4fDbLXHgPI1jfuqcxJkkLdaLnJ0

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  e3c52701a4e6f27db4476a97879b6781ac6bff224d0982b8ce055ed9a8ea9f60
- Size
  
  197KB
- MD5
  
  09a57073477de4a9f6e7fe6d988dd40c
- SHA1
  
  0471d70b28def5c5fab8b7d1c81913299450ad99
- SHA256
  
  e3c52701a4e6f27db4476a97879b6781ac6bff224d0982b8ce055ed9a8ea9f60
- SHA512
  
  8e80d851af436e834715e5412ee6bbaff713e5d90aedd10e796c29868e6808ead60ead0dce22627677f6b8f09cb7342986cb901a20e9786fe5212fcf9bbdd6fc
- SSDEEP
  
  3072:VG4OvpSAlIfTLXHHAPWbzd5ycaTFYZJ99lhQ3zqc6KKVEkkLLZyaaLHHJic0:VG4fDbLXHgPI1jfuqcxJkkLdaLnJ0
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan