smokeloader | 39751e5772b0cc39de3498bd88bf2db28074f4d63927427a2cc8ef1fafebaea3 | Triage

Sharing

General

Target

27c5dd4b4446edef30b84cd2b0861d13
Size

229KB
Sample

241107-lnbwtasncq
MD5

27c5dd4b4446edef30b84cd2b0861d13
SHA1

c5eccaabd602cbd712b32340539b13f3ffb0086e
SHA256

39751e5772b0cc39de3498bd88bf2db28074f4d63927427a2cc8ef1fafebaea3
SHA512

389c130805f72dcd8ecaf4fc53de3728bdba3feb8695f035ddd076be6dfafd8831bbc737dbd755074beb8c46ab4c1406b04b00110136cf1502ba15bd14090a65
SSDEEP

1536:Wii0sOVQKdOI0Sq7okblmjHgTnkfolkV1lbL+NwN46fCBX1KRB3Al5UsSxrcJPR3:gSdlyRmb3oCaN84PBFcAfUsSxU+W

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  27c5dd4b4446edef30b84cd2b0861d13
- Size
  
  229KB
- MD5
  
  27c5dd4b4446edef30b84cd2b0861d13
- SHA1
  
  c5eccaabd602cbd712b32340539b13f3ffb0086e
- SHA256
  
  39751e5772b0cc39de3498bd88bf2db28074f4d63927427a2cc8ef1fafebaea3
- SHA512
  
  389c130805f72dcd8ecaf4fc53de3728bdba3feb8695f035ddd076be6dfafd8831bbc737dbd755074beb8c46ab4c1406b04b00110136cf1502ba15bd14090a65
- SSDEEP
  
  1536:Wii0sOVQKdOI0Sq7okblmjHgTnkfolkV1lbL+NwN46fCBX1KRB3Al5UsSxrcJPR3:gSdlyRmb3oCaN84PBFcAfUsSxU+W
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan