smokeloader | f9b85d398c1e35b6da62ca02a435465e87fc3d30ab6a668e93cb06e8576d6f4d | Triage

Sharing

General

Target

f9b85d398c1e35b6da62ca02a435465e87fc3d30ab6a668e93cb06e8576d6f4d
Size

265KB
Sample

241108-255hfssblr
MD5

aacd3ed57307a8b44476f58d2acb4049
SHA1

45ef04a77e25e37245932c9a5a2815b6d1a4e57d
SHA256

f9b85d398c1e35b6da62ca02a435465e87fc3d30ab6a668e93cb06e8576d6f4d
SHA512

634c29fcce76a23e598be3a8a79833c2755c414ab7c34a3c0c1d7dce253ce9eff5abdfabe3c4c6a4a887bb8e25d4180dbcdae62e7f01576dcac7b91195b7b7ce
SSDEEP

6144:xhFj6Y0DHeNTP2z1cMdiKGher+dKzqZU:nFz0D+NTP2z5gKAer+Li

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  f9b85d398c1e35b6da62ca02a435465e87fc3d30ab6a668e93cb06e8576d6f4d
- Size
  
  265KB
- MD5
  
  aacd3ed57307a8b44476f58d2acb4049
- SHA1
  
  45ef04a77e25e37245932c9a5a2815b6d1a4e57d
- SHA256
  
  f9b85d398c1e35b6da62ca02a435465e87fc3d30ab6a668e93cb06e8576d6f4d
- SHA512
  
  634c29fcce76a23e598be3a8a79833c2755c414ab7c34a3c0c1d7dce253ce9eff5abdfabe3c4c6a4a887bb8e25d4180dbcdae62e7f01576dcac7b91195b7b7ce
- SSDEEP
  
  6144:xhFj6Y0DHeNTP2z1cMdiKGher+dKzqZU:nFz0D+NTP2z5gKAer+Li
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan