smokeloader | cffc24312f53ed3f80857b355b81f0132727bbe138b6b1366bade34b04338991 | Triage

Sharing

General

Target

1264-18-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

241106-mr7ckaxqfs
MD5

7072643c141e63d63b1c178ccfd6e864
SHA1

c695ed5a5893597bc2981d96df10bcadc51656b5
SHA256

cffc24312f53ed3f80857b355b81f0132727bbe138b6b1366bade34b04338991
SHA512

15d54e0123112c2eda9a926cda5e87455217ffb70cd69e5f90e702d23f7bd64a338ba2039e0b4661a891bc0ea660d4a753a61b549e2ed9790846cdfc2886d794
SSDEEP

768:661zaXed3zI4UexPf/O3J3H+0+XPZ8rFrdBnCrp3:D1zIKJH7Irv+

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  1264-18-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  7072643c141e63d63b1c178ccfd6e864
- SHA1
  
  c695ed5a5893597bc2981d96df10bcadc51656b5
- SHA256
  
  cffc24312f53ed3f80857b355b81f0132727bbe138b6b1366bade34b04338991
- SHA512
  
  15d54e0123112c2eda9a926cda5e87455217ffb70cd69e5f90e702d23f7bd64a338ba2039e0b4661a891bc0ea660d4a753a61b549e2ed9790846cdfc2886d794
- SSDEEP
  
  768:661zaXed3zI4UexPf/O3J3H+0+XPZ8rFrdBnCrp3:D1zIKJH7Irv+
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan