smokeloader | 464822a16049367cfdd70e52770123b955206579e9b65206101a7d41784f4a1b | Triage

Sharing

General

Target

464822a16049367cfdd70e52770123b955206579e9b65206101a7d41784f4a1b.exe
Size

388KB
Sample

240912-mlhr1ssckb
MD5

21599b8f6b9d799a51c9fc99f8fb756f
SHA1

fbf2188e672ad3596354d2d32357535d4b79eac2
SHA256

464822a16049367cfdd70e52770123b955206579e9b65206101a7d41784f4a1b
SHA512

44bebbb8a610b18a9380892a97fcb7a496371a0d834aaf72bcf4d22bc22fb4b6d4d5b3fd9d8578f8fbb993cb654bd95550c3ae191f2e746654546929ea426998
SSDEEP

6144:DFdO2+enttkIK8g+trNviXl0BkCQti3j+tymVCYf:D/F9ttkIK8Z/g0ljj

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  464822a16049367cfdd70e52770123b955206579e9b65206101a7d41784f4a1b.exe
- Size
  
  388KB
- MD5
  
  21599b8f6b9d799a51c9fc99f8fb756f
- SHA1
  
  fbf2188e672ad3596354d2d32357535d4b79eac2
- SHA256
  
  464822a16049367cfdd70e52770123b955206579e9b65206101a7d41784f4a1b
- SHA512
  
  44bebbb8a610b18a9380892a97fcb7a496371a0d834aaf72bcf4d22bc22fb4b6d4d5b3fd9d8578f8fbb993cb654bd95550c3ae191f2e746654546929ea426998
- SSDEEP
  
  6144:DFdO2+enttkIK8g+trNviXl0BkCQti3j+tymVCYf:D/F9ttkIK8Z/g0ljj
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan