smokeloader | 9e150ba1db75b4613e50d4a33a2e18eff8d6769ee20467a195e6857881bb2da2 | Triage

Sharing

General

Target

2968-0-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

240822-jl3weawama
MD5

fc17267bd11078c65170b58ac10f35d6
SHA1

5bb05930b74d005cf2de1c0daebc681946456490
SHA256

9e150ba1db75b4613e50d4a33a2e18eff8d6769ee20467a195e6857881bb2da2
SHA512

56716658ee2265959e1cc4011cc5ce821c3744daefee91a96311ee4ac8952fbb99a7a90335e2f51912f9b5cce0cf4f4a7e5c07512dd597c294d1855af85c2cb2
SSDEEP

768:CazBIa4ueiy5prjiFvY9NSiNUzhHzp587z78Lj946ZYlueKZN:tguWrjTSiN2lz/e7kcueKZN

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  2968-0-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  fc17267bd11078c65170b58ac10f35d6
- SHA1
  
  5bb05930b74d005cf2de1c0daebc681946456490
- SHA256
  
  9e150ba1db75b4613e50d4a33a2e18eff8d6769ee20467a195e6857881bb2da2
- SHA512
  
  56716658ee2265959e1cc4011cc5ce821c3744daefee91a96311ee4ac8952fbb99a7a90335e2f51912f9b5cce0cf4f4a7e5c07512dd597c294d1855af85c2cb2
- SSDEEP
  
  768:CazBIa4ueiy5prjiFvY9NSiNUzhHzp587z78Lj946ZYlueKZN:tguWrjTSiN2lz/e7kcueKZN
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan