smokeloader | 4b0c47dad0c96672d24bd49492ae4807df9c91c2fcf06cfd4bdf14671a7b05b2 | Triage

Sharing

General

Target

2264-0-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

240919-w2ws9atane
MD5

a20e87cfcd07b37e12e39da834582987
SHA1

3e9aea8f96fac0afba97a46fbc65ab09154cacff
SHA256

4b0c47dad0c96672d24bd49492ae4807df9c91c2fcf06cfd4bdf14671a7b05b2
SHA512

e039c753ac20a5b2f426bd2c0bb257993f6059b205f63ed53aa7be6457f20297e6f3a2d21cef687398cee4049b0dcf360da2e39d8d1836cf40d7960abcb1b39b
SSDEEP

768:RR8yqBqJTIH50gkSW9uM7/953mpdH5Yvos0tdB80Z1srmN:r8PePvftV53uV5Ygs0TBymN

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  2264-0-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  a20e87cfcd07b37e12e39da834582987
- SHA1
  
  3e9aea8f96fac0afba97a46fbc65ab09154cacff
- SHA256
  
  4b0c47dad0c96672d24bd49492ae4807df9c91c2fcf06cfd4bdf14671a7b05b2
- SHA512
  
  e039c753ac20a5b2f426bd2c0bb257993f6059b205f63ed53aa7be6457f20297e6f3a2d21cef687398cee4049b0dcf360da2e39d8d1836cf40d7960abcb1b39b
- SSDEEP
  
  768:RR8yqBqJTIH50gkSW9uM7/953mpdH5Yvos0tdB80Z1srmN:r8PePvftV53uV5Ygs0TBymN
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan