smokeloader | a3907c6c8a7bb9ca6a032eba5b7518178e007a8a251aed5cf7aea3fc6db39ae7 | Triage

Sharing

General

Target

2596-0-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

241102-wphe4a1fme
MD5

3d825b6c4af4bd530669262a579fbd7e
SHA1

0296c255b21f3c7f57ceaf9e06ec15c8266591ec
SHA256

a3907c6c8a7bb9ca6a032eba5b7518178e007a8a251aed5cf7aea3fc6db39ae7
SHA512

6a7c80e0546b53430f0b05a6a01a522f5f83f75c404b1df324cb4d2a2d44adde4fb40df73dc7ba8e0760925075e8b4928484e300d921c6a78bb16d53c41cc4e5
SSDEEP

768:LaFq5EYwDNuZNe3moyGali+xD1Ux+v/RN:LaEzwUXCXyRJxw6j

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  2596-0-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  3d825b6c4af4bd530669262a579fbd7e
- SHA1
  
  0296c255b21f3c7f57ceaf9e06ec15c8266591ec
- SHA256
  
  a3907c6c8a7bb9ca6a032eba5b7518178e007a8a251aed5cf7aea3fc6db39ae7
- SHA512
  
  6a7c80e0546b53430f0b05a6a01a522f5f83f75c404b1df324cb4d2a2d44adde4fb40df73dc7ba8e0760925075e8b4928484e300d921c6a78bb16d53c41cc4e5
- SSDEEP
  
  768:LaFq5EYwDNuZNe3moyGali+xD1Ux+v/RN:LaEzwUXCXyRJxw6j
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan