smokeloader | 12389146b388dd20a1eafc82f6cefb75fb3e2da826b8848227866d2ef03fca91 | Triage

Sharing

General

Target

12389146b388dd20a1eafc82f6cefb75fb3e2da826b8848227866d2ef03fca91
Size

217KB
Sample

241107-raba1stdkm
MD5

30bd10485264f0d4aa57d5a5d0dcad8d
SHA1

d26a0c9318bc4ae2672830e4c2f47821759a38f0
SHA256

12389146b388dd20a1eafc82f6cefb75fb3e2da826b8848227866d2ef03fca91
SHA512

d5578fc5c95ca4b22a5aa11b67ee508c7f08f57e9a6df5214785b50bf843d61af2a7468f4af0865ed7fb0fa27f11260fce406dbd4b9e07a7669a79930abf0966
SSDEEP

6144:FmU+bTBXMNklubzQSCB7u0xfjfp41uHPU00ANAiNcW:FaTJubzQJljfp418MffiaW

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  8a96dee141672b1a73de19ac71aa51874a1490fcff6bbda897e2e5d59427f1a6
- Size
  
  328KB
- MD5
  
  24cdc5cbf2b60ee657c4a80ca5ef73e6
- SHA1
  
  88088da23232441d187cb75d23bdd4fd56eabb2d
- SHA256
  
  8a96dee141672b1a73de19ac71aa51874a1490fcff6bbda897e2e5d59427f1a6
- SHA512
  
  f6051394cd6e0809568d54a2fe6aedc26eb3c90f35525c4be2f8b65e10e4d2a2581a38104454c7f967917361b83e60dddf56bc0161adc695330925c74c547923
- SSDEEP
  
  6144:uJ96gLbfULbJzBMHroY62V1cHCYpLje1atpBYQK:urpk3JzBOLn365ljaatUQK
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan