smokeloader | 334f88c8c8573d2921986588ec6512f9cae5db00ca9fdc7df4d4c21d46ae2f9b | Triage

Sharing

General

Target

334f88c8c8573d2921986588ec6512f9cae5db00ca9fdc7df4d4c21d46ae2f9b
Size

131KB
Sample

241107-ke2kfa1qfk
MD5

312be093856c4ae1ddb2ae82bc66d47e
SHA1

835ec24857b23cbb208d91da28c5f893e228d101
SHA256

334f88c8c8573d2921986588ec6512f9cae5db00ca9fdc7df4d4c21d46ae2f9b
SHA512

e18ba5e145b4c653bcf9d64a5b16b04503d8d4fd87fd71a4c217cde59648ec6d69e814fea7a3c0b32e2d437456a408cb9f8bc4d84a54b70963c8c0bbec46e981
SSDEEP

3072:mKmiu3JZAMbgJ3fn7yziRRn3xnatUXDvJw9zjBlsGzwP18:IJZALJ3TDdRz2XTsxu

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  c4421cdb7edb493d12387e2574a97bd0632aa20df67c6df3afe5df25c4465390
- Size
  
  183KB
- MD5
  
  49c66fa04c620551e341065ac29ec39c
- SHA1
  
  f25d5b126d3d1fa920efe372a41774a3613de43c
- SHA256
  
  c4421cdb7edb493d12387e2574a97bd0632aa20df67c6df3afe5df25c4465390
- SHA512
  
  9a5bad3af5877717e06f3e7c0eb79ae6e99c26f29e67a42e4a5980910cdc748976e392217b0f009c83310bac7906e55b3632c878352ab3e87ececa01ae5ebb62
- SSDEEP
  
  3072:Tsh98iGIwaOYXWPy8yUZBsGB1nTIgIi7Ij1OsxkgaBChG:ohLG2xyy8X1nTIgIi2iga
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan