smokeloader | ffa0766b2569fcc2869720ed6884bead4dde06ac2d2e5de72f2f04607d327736 | Triage

Sharing

General

Target

ffa0766b2569fcc2869720ed6884bead4dde06ac2d2e5de72f2f04607d327736
Size

197KB
Sample

230212-csfwwsbb4v
MD5

1090e7e0d6523d122ea095aed7adde1e
SHA1

658853ab24addd621850bcc1f0cd3a37ed0c96e5
SHA256

ffa0766b2569fcc2869720ed6884bead4dde06ac2d2e5de72f2f04607d327736
SHA512

029ff5c71051797a7cc85c0152bee566b5d3a14d3d9efb1f2f69fc473281831b34fe69abe18cd63a91382b051d4fdfa93571cf11932c35e99202a7c591de3bca
SSDEEP

3072:fjqP9+0JO9eh5C5jijXZPbtFKGUgB87jAG1v1h3/xtG:fGlRSz5jEKNy87h3/x

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  ffa0766b2569fcc2869720ed6884bead4dde06ac2d2e5de72f2f04607d327736
- Size
  
  197KB
- MD5
  
  1090e7e0d6523d122ea095aed7adde1e
- SHA1
  
  658853ab24addd621850bcc1f0cd3a37ed0c96e5
- SHA256
  
  ffa0766b2569fcc2869720ed6884bead4dde06ac2d2e5de72f2f04607d327736
- SHA512
  
  029ff5c71051797a7cc85c0152bee566b5d3a14d3d9efb1f2f69fc473281831b34fe69abe18cd63a91382b051d4fdfa93571cf11932c35e99202a7c591de3bca
- SSDEEP
  
  3072:fjqP9+0JO9eh5C5jijXZPbtFKGUgB87jAG1v1h3/xtG:fGlRSz5jEKNy87h3/x
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan