smokeloader | 76d92d11bb4cc5936f1ef74cb42384b4775fa87199dffeb2bc339c26631cdd48 | Triage

Sharing

General

Target

76d92d11bb4cc5936f1ef74cb42384b4775fa87199dffeb2bc339c26631cdd48
Size

141KB
Sample

241107-g8vr7sxglr
MD5

09e24d200aaec9ef0848c6d3781d95f8
SHA1

3ce72e368b7ae06ee424c90da8e8701adc128602
SHA256

76d92d11bb4cc5936f1ef74cb42384b4775fa87199dffeb2bc339c26631cdd48
SHA512

76572335268b532317ed1afc01fafe0f6d0d5024da1bed99b64f762e5ab62d8988af0b15ceda7f604d6e3932ff6ca2f3fd9d145298c24ed67d17ae2a82eeddbe
SSDEEP

3072:W/Is0mjdEgiFhdxGQNColoXM8F96CeB5J7UYnKuf6jjw6:KDFitEmNhr1KYn16jjv

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  d58448469a68d430d85894b1bc7df32be3931b9ac2c64154ed55ed74830fc0df
- Size
  
  226KB
- MD5
  
  5265d31c93441df607ce7b0dae3e680e
- SHA1
  
  557ca000136c84344aadf189710c22b2dc5e13a0
- SHA256
  
  d58448469a68d430d85894b1bc7df32be3931b9ac2c64154ed55ed74830fc0df
- SHA512
  
  3633d187087ccc31cbefec5ce6272507a4d12c19cb14dd348713fd6d94f2cff2c04b89a2c8942b2f6fcd6500017fa9eff171ee88b374de0ab53c8c6a79ebbfe5
- SSDEEP
  
  3072:xDOnsLMaoZ5L8FuaMTPHwH4IzIpIDgkxcauDUtLNXf/ln:dLMxsxuPHwPcpQg5aMUtb
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan