smokeloader | ef797d68016c019a30eff426a2171b6f787a37d3daa67a048496096f9d06e4b0 | Triage

Sharing

General

Target

ef797d68016c019a30eff426a2171b6f787a37d3daa67a048496096f9d06e4b0
Size

193KB
Sample

230215-ccjb3she76
MD5

f1614743c94b31f4a331fda3f8816356
SHA1

747fc91b141acd8fe4990958a30f39ccdaa34977
SHA256

ef797d68016c019a30eff426a2171b6f787a37d3daa67a048496096f9d06e4b0
SHA512

e36048f747d36a62ab9ea23a37eac29e6ccf4f9643434823d995aaa015376e3e1ca4e6c55b103b9bea44b1963e16c5c5d0f80907e680dbdb268b2ea22308627b
SSDEEP

3072:fvNKeQLLLNAH5aeyfy035vlfWWjeQtbWdNW+5bUHc:gLhAQ1fy0ppWW5bWdrbU

Score

10^/10

smokeloader backdoor trojan

Malware Config

Targets

- Target
  
  ef797d68016c019a30eff426a2171b6f787a37d3daa67a048496096f9d06e4b0
- Size
  
  193KB
- MD5
  
  f1614743c94b31f4a331fda3f8816356
- SHA1
  
  747fc91b141acd8fe4990958a30f39ccdaa34977
- SHA256
  
  ef797d68016c019a30eff426a2171b6f787a37d3daa67a048496096f9d06e4b0
- SHA512
  
  e36048f747d36a62ab9ea23a37eac29e6ccf4f9643434823d995aaa015376e3e1ca4e6c55b103b9bea44b1963e16c5c5d0f80907e680dbdb268b2ea22308627b
- SSDEEP
  
  3072:fvNKeQLLLNAH5aeyfy035vlfWWjeQtbWdNW+5bUHc:gLhAQ1fy0ppWW5bWdrbU
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan