smokeloader | a059d671d950abee93ef78a170d58a3839c2a465914ab3bd5411e39c89ae55a2 | Triage

Sharing

General

Target

250920241225svc.exe
Size

249KB
Sample

240925-wkztkssclc
MD5

6476071b5a91ac078350768dc9b2e953
SHA1

f40fcb5af96c56305a64790ccbaa261c10173782
SHA256

a059d671d950abee93ef78a170d58a3839c2a465914ab3bd5411e39c89ae55a2
SHA512

87784413018fea89dff5763d08e00d878af9a3db6b29708dec6fe0d0d3feb4eb8f3efc5c27851d13eb779bd3dedebdcc5958e349b8acc03102f8be6b0dd78f9d
SSDEEP

6144:H5LCUgHU2L8e3oGdA0UkzFYc5NHuPCYE:H5GUyUC7oeARkjSCYE

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  250920241225svc.exe
- Size
  
  249KB
- MD5
  
  6476071b5a91ac078350768dc9b2e953
- SHA1
  
  f40fcb5af96c56305a64790ccbaa261c10173782
- SHA256
  
  a059d671d950abee93ef78a170d58a3839c2a465914ab3bd5411e39c89ae55a2
- SHA512
  
  87784413018fea89dff5763d08e00d878af9a3db6b29708dec6fe0d0d3feb4eb8f3efc5c27851d13eb779bd3dedebdcc5958e349b8acc03102f8be6b0dd78f9d
- SSDEEP
  
  6144:H5LCUgHU2L8e3oGdA0UkzFYc5NHuPCYE:H5GUyUC7oeARkjSCYE
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan