smokeloader | 090643b30dac69801fc185d45011dd17b1ebfeeaa7998940b41c64a3e8d206d3 | Triage

Sharing

General

Target

2984-0-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

240925-mq1hma1bjl
MD5

0f6bb914500bfac3e366c5a1cbffc4de
SHA1

5953dc56641e9e56fff2ea30fd5b9b699bf304c0
SHA256

090643b30dac69801fc185d45011dd17b1ebfeeaa7998940b41c64a3e8d206d3
SHA512

ad62227dee8040873d68d8dd8332aeed8cddc8a65da1dc2a912d902844fd82272cca71ea51b8ca0ed0397e85b3e035f42cc47f15816869f77440c241c4ca1bd2
SSDEEP

768:LaFq5EYMBNuZNe3moyGali+xD1Ux+v/RN:LaEzMiXCXyRJxw6j

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  2984-0-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  0f6bb914500bfac3e366c5a1cbffc4de
- SHA1
  
  5953dc56641e9e56fff2ea30fd5b9b699bf304c0
- SHA256
  
  090643b30dac69801fc185d45011dd17b1ebfeeaa7998940b41c64a3e8d206d3
- SHA512
  
  ad62227dee8040873d68d8dd8332aeed8cddc8a65da1dc2a912d902844fd82272cca71ea51b8ca0ed0397e85b3e035f42cc47f15816869f77440c241c4ca1bd2
- SSDEEP
  
  768:LaFq5EYMBNuZNe3moyGali+xD1Ux+v/RN:LaEzMiXCXyRJxw6j
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan