smokeloader | 7778c1b1681cf904de329d86bcffe40e88d76ce8e6e8efc435075adfef1e7904 | Triage

Sharing

General

Target

7778c1b1681cf904de329d86bcffe40e88d76ce8e6e8efc435075adfef1e7904
Size

153KB
Sample

241106-sdlrla1pds
MD5

9a4fa1332af9eae7b99090d4a4e9bd03
SHA1

3e5cd177b57401e7e3fa231d95e86e35d12c3490
SHA256

7778c1b1681cf904de329d86bcffe40e88d76ce8e6e8efc435075adfef1e7904
SHA512

76f40de7fb2e963a1c84be5fce7c2ae470de4e18c35b7e09e4a9cedd3549021a3e0630780c47958b535f97d06432ede8c67fc6737aa0c2028433af2af90db8a9
SSDEEP

3072:QiJqqq3mRLclQIfYIY9aGvSNLDc40az5yBJWSKKgccfpkbu2oivneUbK4o9dQQ:QBqN4KCdsn+kuyLKKgDfovneAV8dQQ

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  84a205fffd1d555cfeaaf5021b4416aa7a7f12f9251d2f290b96906d6b00eb5f
- Size
  
  235KB
- MD5
  
  6048ae4ea7f460cd3f59c0e1fad882d8
- SHA1
  
  23c694cdc44989e14102b9b69aa737c6ef75b8e2
- SHA256
  
  84a205fffd1d555cfeaaf5021b4416aa7a7f12f9251d2f290b96906d6b00eb5f
- SHA512
  
  b524844da46e097e3fee2b27b8a073b8587689c43a671a2af2c479834d2fb81b3a84ef2af9c65500758af93544263fa6390404f459bc1caa3902e8099e655313
- SSDEEP
  
  3072:vvBm3q/wv+YIL/tYjMB9z5kB5Eg5cSN+r7X34tv+dLbYIs6u2Ws6py:vviq/wcL2jMOPEr7n4tvO/ru/s6o
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan