smokeloader | 14a07677c0415e1985bccd51338ecaa73c08b4be5173b543f53b600ea3409807 | Triage

Sharing

General

Target

14a07677c0415e1985bccd51338ecaa73c08b4be5173b543f53b600ea3409807
Size

201KB
Sample

241107-p2jqcsvmhj
MD5

c1d1f5b00cdaf0ea6626ea1dbe9e32c0
SHA1

382acef5e59882c4c97d3c88aad5484a8ec9003d
SHA256

14a07677c0415e1985bccd51338ecaa73c08b4be5173b543f53b600ea3409807
SHA512

80b4cf82c9987c4b5c2f07bb2e8ad2a11355aa84f4d6b27e22b531fa1f94ffbfab3abe732f8bcf9c54a49e96388772f361e1680a4e89dda9e9d2180282147b4a
SSDEEP

3072:22TyRq6bXC4GFi+dVq6LTry88TgHaNIyJEjHqKTQLqFJFdSLZMlHfdSwaiRKaidI:22TyA2XC9FZqO3yLQjGDHqdgZEHsbax

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  760eaa8737908a36b3530d765ccfa47e049abdb2f3d8a77f11eddeebdeabd60f.exe
- Size
  
  291KB
- MD5
  
  47d6ed6eb2b930ec19fba5a5f4bdb632
- SHA1
  
  9c71877c95162d128fa0f41603f433b5fa2a3b9a
- SHA256
  
  760eaa8737908a36b3530d765ccfa47e049abdb2f3d8a77f11eddeebdeabd60f
- SHA512
  
  692efbfc3abd927ff6a5a9f0e286e2d4c4946ade03c66d42843e4108e1a927d1d49a643c4b70c66b4ccc44530cda70d3dd17dc1e50fbcd5c987d1e98c292274d
- SSDEEP
  
  6144:PCfW/LUkDQuABl5Z5XFhNm1vDhqYSlJZ9tzrSA3H:PSW/lD98tJFXADMVZ9P3
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan