smokeloader | 6315393be303ea65be6ff1c60814cbcba5cd8e51fdf07da4373d0599c8fb8ce7 | Triage

Sharing

General

Target

6315393be303ea65be6ff1c60814cbcba5cd8e51fdf07da4373d0599c8fb8ce7
Size

158KB
Sample

241107-273fwaspdp
MD5

b6fbb0dd67c9fd58bf9c7e60aeb3e9b8
SHA1

2d30a2db0ac43921dfdf0228f738c0884bf0bd83
SHA256

6315393be303ea65be6ff1c60814cbcba5cd8e51fdf07da4373d0599c8fb8ce7
SHA512

bd3abec9fce65232c4b0a11d60ed30aab1ef501edb5fe65af6472fb55a2113129fa84633d0f6ece7be35b2fb7ef6501565aadb51f1824d5a4075c0036c56158d
SSDEEP

3072:iDVrpJZEFMyHkcVTW68qdPPF+64iIFGRXDp5xwzuhwVrcrf2uq8CCSuEQJG9:SVJZKHhWQd3F549Gr52zumVwy8CWEP

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  a041839327295fde3df12ea61374abd19c4499b87e211757c593179d6a6870d1
- Size
  
  255KB
- MD5
  
  7fdba86bba0508054fd1f058a6a2d134
- SHA1
  
  131aa6889c55b9348a452fdf369fe54c2f05ba48
- SHA256
  
  a041839327295fde3df12ea61374abd19c4499b87e211757c593179d6a6870d1
- SHA512
  
  901b368bf99f8b715186d22d73bbb80a87f8498fd375b9023d798651f5c0939d01d3ec3ec50ce148699b6228aca59711883e9a30e986c1c5d18e95e8ab1967f1
- SSDEEP
  
  6144:VU8vCLXBfoCmgZw6NNTs9VUkIqj8m+z7:VU8apkQw6N6LUkpv+z7
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan