smokeloader | 361f906a535ff34e3312c16b96186700fa18334ebe2c837d0e64d9080a61c2e9 | Triage

Sharing

General

Target

2500-0-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

240906-jx3d1svhqg
MD5

4e4312c3950d5b1db7fc60760ec7c200
SHA1

b16dab6b9f42866bfe75cc1057150e20c40d0152
SHA256

361f906a535ff34e3312c16b96186700fa18334ebe2c837d0e64d9080a61c2e9
SHA512

39c80122642ccee560df449728d1934df6ecb5ca4ffc4fb99d313cb651f0563f2de2f23a35db041b3b0ad36400f7cbf53f3ab1bf407b3303a1a28102640eba99
SSDEEP

768:LaFq5EYENuZNe3moyGali+xD1Ux+v/RN:LaEzRXCXyRJxw6j

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  2500-0-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  4e4312c3950d5b1db7fc60760ec7c200
- SHA1
  
  b16dab6b9f42866bfe75cc1057150e20c40d0152
- SHA256
  
  361f906a535ff34e3312c16b96186700fa18334ebe2c837d0e64d9080a61c2e9
- SHA512
  
  39c80122642ccee560df449728d1934df6ecb5ca4ffc4fb99d313cb651f0563f2de2f23a35db041b3b0ad36400f7cbf53f3ab1bf407b3303a1a28102640eba99
- SSDEEP
  
  768:LaFq5EYENuZNe3moyGali+xD1Ux+v/RN:LaEzRXCXyRJxw6j
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan