smokeloader | cb9d1ebc73719f1434f92e6648b4815c01dadef4761f7cc4e91561ce34da6346 | Triage

Sharing

General

Target

cb9d1ebc73719f1434f92e6648b4815c01dadef4761f7cc4e91561ce34da6346.exe
Size

234KB
Sample

240821-ftpf7s1eqd
MD5

64b4ac441e96d0fca88fb2a62cc170b0
SHA1

5d111704bfb4a26778bc5bf7f9e13cda1a53a767
SHA256

cb9d1ebc73719f1434f92e6648b4815c01dadef4761f7cc4e91561ce34da6346
SHA512

5bec6da89297d73e3ec7f53658c2006ba84c22776a8f63d80619b7ebe810bdccb8c729d6ce688c6ab1b1d61a16dc4e08b390c2d401b1c2b913f5df3107beb5e9
SSDEEP

3072:R7zwL9yI/sBPRA4QCMTRswzIdIzXLEZGs1LCX3B5MPMbynBDm:9zwLJsBP9QbHznkZFcoP

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  cb9d1ebc73719f1434f92e6648b4815c01dadef4761f7cc4e91561ce34da6346.exe
- Size
  
  234KB
- MD5
  
  64b4ac441e96d0fca88fb2a62cc170b0
- SHA1
  
  5d111704bfb4a26778bc5bf7f9e13cda1a53a767
- SHA256
  
  cb9d1ebc73719f1434f92e6648b4815c01dadef4761f7cc4e91561ce34da6346
- SHA512
  
  5bec6da89297d73e3ec7f53658c2006ba84c22776a8f63d80619b7ebe810bdccb8c729d6ce688c6ab1b1d61a16dc4e08b390c2d401b1c2b913f5df3107beb5e9
- SSDEEP
  
  3072:R7zwL9yI/sBPRA4QCMTRswzIdIzXLEZGs1LCX3B5MPMbynBDm:9zwLJsBP9QbHznkZFcoP
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan