smokeloader | cc489b6587d96f228c7fca6346f4ac00111383cb6c453b486375a76a70ed92f5 | Triage

Sharing

General

Target

cc489b6587d96f228c7fca6346f4ac00111383cb6c453b486375a76a70ed92f5
Size

152KB
Sample

241106-3dctsssmgj
MD5

ca6486ddb0986c9777cb0c9b7bf40f0e
SHA1

c342fee6d5076dc9f13f9e5ab876411276890cda
SHA256

cc489b6587d96f228c7fca6346f4ac00111383cb6c453b486375a76a70ed92f5
SHA512

906788ebf748530cbac3f1c1e694f5bf02691e4046ec1d7df8e9b3356e8c4315e4d154251335b181762cfcd099f7fbb558e2d08cb46c30a925ecf576fe1ad03f
SSDEEP

3072:kYcZjkw+8BP24JFY29gQ6DwZ1aUj4ifAoZMt:WZjR52UY2r66hAV

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  9f3012b4ff0d9488fd23233d6beeaf128fd0e83bfa5038bb71e2f1365853aeb8
- Size
  
  233KB
- MD5
  
  6cf78b93ea34e9eb07a574d238e9ed11
- SHA1
  
  6d8c7a63e98463c3beaa69ee5c5376fd7009a287
- SHA256
  
  9f3012b4ff0d9488fd23233d6beeaf128fd0e83bfa5038bb71e2f1365853aeb8
- SHA512
  
  1da9dd07da41442ee67396598ad502483088797cebe57bd6b7ab137c5097056df580d6e2a60b3a78b3cea5b0f021bf1eb643c10a083c5408db33b735ba018d51
- SSDEEP
  
  3072:vmBZdp/nU8MLODf4s8fB9z5U9HL8vLJOjqmN3fZlNBKYIsXhVQdl6py:vmVp/nyLC4s8fe5L8DwuyNY2+l6o
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan