smokeloader | 37a0940f58415e17761916654c4727825c0438cf869cb8d5e9551466ba196e30 | Triage

Sharing

General

Target

37a0940f58415e17761916654c4727825c0438cf869cb8d5e9551466ba196e30
Size

215KB
Sample

241108-1dbwdszgnl
MD5

57a4e94841ef3b0540ad9569a1a402ab
SHA1

9a7e23e02f733b2c1ce0d8d68ee730baf9a6f50b
SHA256

37a0940f58415e17761916654c4727825c0438cf869cb8d5e9551466ba196e30
SHA512

ce499f9f7341942c4fda315c195b13cc99012f8d0586fc351c1399648ba794f19aa2a3fa9d10848cdc8309e18a989467f22000e512e7219a32df8bcfe1efea5f
SSDEEP

6144:W1kT+4D3AjcLAtXGXWOEiKqYeSSbCmNUVjL9TWJzl:ckXLAQL03/i3JbFa9izl

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  a71b161796d07394e22622bcab68843b2ab11d60300bcc9e95bfb1d357b1b504
- Size
  
  326KB
- MD5
  
  b0906b5db32a0cebe457bf21ceebb524
- SHA1
  
  3fca8542abc43270cd66176360e159e87195fcf2
- SHA256
  
  a71b161796d07394e22622bcab68843b2ab11d60300bcc9e95bfb1d357b1b504
- SHA512
  
  4a3a812e6aff7571d27f7bad3cd0f3058df40ef93cfee4f0e692220b948db259866559d1ffa3f6d9dfeb67a6abcd790933f81d11f800dc87651997f363a3724c
- SSDEEP
  
  6144:wd0ZKC9LI9X0EUiodLtU0WeYR6mZ2+sPZe4pLje1atpBYQW:wyr9uX0EUiodW8YQ24ljaatUQW
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan