smokeloader | c6c4487d042de9c25b7e7a6982568516dc96b930d84c86fceada7ca108d49217 | Triage

Sharing

General

Target

c6c4487d042de9c25b7e7a6982568516dc96b930d84c86fceada7ca108d49217
Size

192KB
Sample

230214-3rkrkage2w
MD5

42a9473f3a48680e1e106b52e0382fef
SHA1

6a111befb8da87f0e84bd1e111fd0db0539d0e8b
SHA256

c6c4487d042de9c25b7e7a6982568516dc96b930d84c86fceada7ca108d49217
SHA512

62d1e71f408fd1ebec4aae8d8f27ae9b854abc2e15e9a406e30a343499847f4b9821b25750e75844de9b63dbbf976cd034d173e08b842f01d04fe76a21f3c4a0
SSDEEP

3072:vzdN66Lh6U45FF4tyLdWfM5b7KYJd19C3e41PQSM/A4y:pLIU8FPLd77/sJ6Ly

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  c6c4487d042de9c25b7e7a6982568516dc96b930d84c86fceada7ca108d49217
- Size
  
  192KB
- MD5
  
  42a9473f3a48680e1e106b52e0382fef
- SHA1
  
  6a111befb8da87f0e84bd1e111fd0db0539d0e8b
- SHA256
  
  c6c4487d042de9c25b7e7a6982568516dc96b930d84c86fceada7ca108d49217
- SHA512
  
  62d1e71f408fd1ebec4aae8d8f27ae9b854abc2e15e9a406e30a343499847f4b9821b25750e75844de9b63dbbf976cd034d173e08b842f01d04fe76a21f3c4a0
- SSDEEP
  
  3072:vzdN66Lh6U45FF4tyLdWfM5b7KYJd19C3e41PQSM/A4y:pLIU8FPLd77/sJ6Ly
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan