smokeloader | 5c902d0f0618d020b89c916d03ae3b2b808bbd525b9dd71ed30a38b5939adfca | Triage

Sharing

General

Target

5c902d0f0618d020b89c916d03ae3b2b808bbd525b9dd71ed30a38b5939adfcaN
Size

36KB
Sample

241106-xy2qrswcrc
MD5

fdd150f95b9aff884c7dbb16967d1e30
SHA1

620a482aa3898a59c626456f1da9edda5a934f19
SHA256

5c902d0f0618d020b89c916d03ae3b2b808bbd525b9dd71ed30a38b5939adfca
SHA512

f2b9596de88c8fd38e7b2a9b1b98890d1081f47be5abc91037c31ea9094cf4f352b7734399f3fc5017f9a05d4f357460138c12001dad4707db0799dd5b131dab
SSDEEP

384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  5c902d0f0618d020b89c916d03ae3b2b808bbd525b9dd71ed30a38b5939adfcaN
- Size
  
  36KB
- MD5
  
  fdd150f95b9aff884c7dbb16967d1e30
- SHA1
  
  620a482aa3898a59c626456f1da9edda5a934f19
- SHA256
  
  5c902d0f0618d020b89c916d03ae3b2b808bbd525b9dd71ed30a38b5939adfca
- SHA512
  
  f2b9596de88c8fd38e7b2a9b1b98890d1081f47be5abc91037c31ea9094cf4f352b7734399f3fc5017f9a05d4f357460138c12001dad4707db0799dd5b131dab
- SSDEEP
  
  384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan