smokeloader | 3d5f36e2f68059efddc12285c448a26b436829fa6f6fa91a3e2b3c6b6e0de3d6 | Triage

Sharing

General

Target

3d5f36e2f68059efddc12285c448a26b436829fa6f6fa91a3e2b3c6b6e0de3d6
Size

216KB
Sample

241107-f17w5aynbl
MD5

acae8a8b3dc6db4b7dfbd95c171acacb
SHA1

ffff41c9a1220c19c49b92fceca919f79dd9f75b
SHA256

3d5f36e2f68059efddc12285c448a26b436829fa6f6fa91a3e2b3c6b6e0de3d6
SHA512

4b0874cd0b0766e90fe37598f3c88b6d9625d5ee642aaa40e91a488b2d934fac8fac13c96795186bc38c46bc97eab7a8d3766195f6a84268451da2823dda323c
SSDEEP

6144:kzhIc+n9AYRSOkp+yW7G4GTOGqPpANdN6NeHl:kVI1cLHWu/mmN6IHl

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  22c0d2ba0c4a29a6822cbcada66521f0a2e1979e892980fe04b983b2add97c19.exe
- Size
  
  326KB
- MD5
  
  f718940e394ce25654c5aef3d6f359de
- SHA1
  
  68604ce5385a0c14da141fa71a0f0008b48af3cc
- SHA256
  
  22c0d2ba0c4a29a6822cbcada66521f0a2e1979e892980fe04b983b2add97c19
- SHA512
  
  0eb6ab553946aabc6e9408efff5b525c7e85685f8aa7730ba129b70a3144c1874494091ae1a005f0824ec4860ba7795a0debfddfdfe7a2fa7bbe9f25e10e7ffb
- SSDEEP
  
  6144:EPLSxFEuTmRrCyv+jP43q+dE2zCoSOPZElnyHSUBVY:EP+xtmRh+jPz+dE2z2OkTqV
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan