smokeloader | 77b9d55f1d51586e251ffb6c4a11f8076e649eb028324dea6a14d92560e892d0 | Triage

Sharing

General

Target

38b9cb090f2a2600849848914d1a7e9d
Size

146KB
Sample

241107-swjd7atqgw
MD5

38b9cb090f2a2600849848914d1a7e9d
SHA1

9a652dc66ec926e4587b406c83ed29415844c231
SHA256

77b9d55f1d51586e251ffb6c4a11f8076e649eb028324dea6a14d92560e892d0
SHA512

58da7769904c1648ac91214f0ae55c9290755cf7c9803f867807da5c62208a18f0f3435c607294cd5931fe39ec10fc6c7510d649476ef02b61be5e6066ff2eab
SSDEEP

3072:aCM3UNNDWr6f+KLAomDSNWtj7OcjCib08YChN+X+ubaQ8RmsWG/WTHgz:oUNO65AoE8+7bOib0bChN+OumteEz

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  16510e3e3b17c090d61378c45244828cf1498f99c23f30444c793e21cdb4c14e
- Size
  
  286KB
- MD5
  
  bb1e281bccd01b2d86d1801906e0b531
- SHA1
  
  f1104d0ed065fade912c2883e532c02e6474fc70
- SHA256
  
  16510e3e3b17c090d61378c45244828cf1498f99c23f30444c793e21cdb4c14e
- SHA512
  
  8970277b64ca5e703fc9553f330dd8270917ccb6668609f6bd9901176f6b69b75d36c9dd72e015a1b27b6396ac946663273c68037d22d132cfc7ef31eb65873b
- SSDEEP
  
  3072:TW27HE1WujTG//xh45E5WVh/F208YChN+X+ubAOudjfx4lUOjE:T/7FujKLJAVh/F20bChN+OusHdjf
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan