smokeloader | fdfbdd42944c9e3b9697a8d8375e4e5cfd45c86941aa3f8f6dd0d08607b73144 | Triage

Sharing

General

Target

svc.exe
Size

261KB
Sample

240929-k7zljsxemk
MD5

28971ced9168cc58fe92749bdff49afe
SHA1

6b8cb8a205dc3fef12981306d5b7072f519cff3c
SHA256

fdfbdd42944c9e3b9697a8d8375e4e5cfd45c86941aa3f8f6dd0d08607b73144
SHA512

ab82ad76a957e5f558a597b9fcd9d69cad1ab3c185e590d0726eff00623e812076845b4e4b05fc3dc6a95ff73de9d3b492e552ad9d3aaaf6fd672990b3c0e71c
SSDEEP

3072:ELia71mN5VMDa8WrGmL2DO5VK1JLpSm5wgWyhM/5hYKIQ2MMDW27U5O5:ELiM1qqafCD+VKAgThM/5yxNDDo5

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  svc.exe
- Size
  
  261KB
- MD5
  
  28971ced9168cc58fe92749bdff49afe
- SHA1
  
  6b8cb8a205dc3fef12981306d5b7072f519cff3c
- SHA256
  
  fdfbdd42944c9e3b9697a8d8375e4e5cfd45c86941aa3f8f6dd0d08607b73144
- SHA512
  
  ab82ad76a957e5f558a597b9fcd9d69cad1ab3c185e590d0726eff00623e812076845b4e4b05fc3dc6a95ff73de9d3b492e552ad9d3aaaf6fd672990b3c0e71c
- SSDEEP
  
  3072:ELia71mN5VMDa8WrGmL2DO5VK1JLpSm5wgWyhM/5hYKIQ2MMDW27U5O5:ELiM1qqafCD+VKAgThM/5yxNDDo5
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan