smokeloader | cb7204447fb5a03f3afecc2fc183b176caf3c631c98a5d30f6394f88275e31e9 | Triage

Sharing

General

Target

1300-0-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

240925-lkpy9sxhqp
MD5

fca991b694ca2d43c8476ebe7f5dbed2
SHA1

ae9ff45aa1430000b5d0237bdcea1fd8cb747eca
SHA256

cb7204447fb5a03f3afecc2fc183b176caf3c631c98a5d30f6394f88275e31e9
SHA512

9fe3e3ea8d14ce977d38975e1a00c241b842e911c57d8e96c976e1faeeabcf3a947d3c690f04a67caa1f6b073fbf0ad06bdfa616cc132e6cb4020b41f1eb7a68
SSDEEP

768:CNRArRr0nz5y+bgsDF5I0haNLj1PokgJ4T:CNRAdonzVF20MBj1PgJ4T

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  1300-0-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  fca991b694ca2d43c8476ebe7f5dbed2
- SHA1
  
  ae9ff45aa1430000b5d0237bdcea1fd8cb747eca
- SHA256
  
  cb7204447fb5a03f3afecc2fc183b176caf3c631c98a5d30f6394f88275e31e9
- SHA512
  
  9fe3e3ea8d14ce977d38975e1a00c241b842e911c57d8e96c976e1faeeabcf3a947d3c690f04a67caa1f6b073fbf0ad06bdfa616cc132e6cb4020b41f1eb7a68
- SSDEEP
  
  768:CNRArRr0nz5y+bgsDF5I0haNLj1PokgJ4T:CNRAdonzVF20MBj1PgJ4T
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan