smokeloader | 942478bcf04d1edb66a618962451f11d92b852399b68b14c5dcd82fbf5ed53e7 | Triage

Sharing

General

Target

942478bcf04d1edb66a618962451f11d92b852399b68b14c5dcd82fbf5ed53e7
Size

235KB
Sample

241106-1tqpgsyhkl
MD5

c39efa74f5e1f868bbfa59183d28b401
SHA1

e2ccfdd0d24707a804f0c769013988effa67de0c
SHA256

942478bcf04d1edb66a618962451f11d92b852399b68b14c5dcd82fbf5ed53e7
SHA512

75375387926eaf1ee1f2bea62c3ba744c28c1e9931f2f5c22dbf353a4603ae4573421ae26ce5dc90e9db7826b5665e0385d9586681a9ac3fddda84745c441544
SSDEEP

3072:vOB3l//MxekLEzMEGB9z5UzfsK3xGteAQsi3eVmtG4YZbYIsw7aNQ6py:vOb//MrLtEGcsKWQs6Or4cwQ6o

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  942478bcf04d1edb66a618962451f11d92b852399b68b14c5dcd82fbf5ed53e7
- Size
  
  235KB
- MD5
  
  c39efa74f5e1f868bbfa59183d28b401
- SHA1
  
  e2ccfdd0d24707a804f0c769013988effa67de0c
- SHA256
  
  942478bcf04d1edb66a618962451f11d92b852399b68b14c5dcd82fbf5ed53e7
- SHA512
  
  75375387926eaf1ee1f2bea62c3ba744c28c1e9931f2f5c22dbf353a4603ae4573421ae26ce5dc90e9db7826b5665e0385d9586681a9ac3fddda84745c441544
- SSDEEP
  
  3072:vOB3l//MxekLEzMEGB9z5UzfsK3xGteAQsi3eVmtG4YZbYIsw7aNQ6py:vOb//MrLtEGcsKWQs6Or4cwQ6o
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan