smokeloader | ebb83c57436edb7c5276df856db3f656172d3223262f9b11ed8fa1d43aa47dd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebb83c57436edb7c5276df856db3f656172d3223262f9b11ed8fa1d43aa47dd7
Size

141KB
Sample

241108-gykt9axcqa
MD5

9de9d9bc49728ae2c6a8959225360430
SHA1

b975db88921e430910d48e86331381127cdb1dc3
SHA256

ebb83c57436edb7c5276df856db3f656172d3223262f9b11ed8fa1d43aa47dd7
SHA512

19923208c2329cd5d0d705ca948295036a20bc16666ea94fdd97246c058cf2ceeae89a32e7d56cc7eb04c7ac096df0da1c22919798e8b0d542021c21ae887f1c
SSDEEP

3072:IooYMcGqxSpn/RB1XFPsO+5zG1nuVWYCTxd8xariFBf:TcCSjB1ND+5EnuVWXxd8x7

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  2ac911e9b7c9c2a5bc94a3378e4a07425ebfcf67889422579e32b11e942fee6c
- Size
  
  228KB
- MD5
  
  e73e74eb094cd75c4fef906d193bf7bc
- SHA1
  
  7d734ce05ef41e92028ca8754db46fb146dc12d7
- SHA256
  
  2ac911e9b7c9c2a5bc94a3378e4a07425ebfcf67889422579e32b11e942fee6c
- SHA512
  
  5bc69c2c41e591630320e54a2c7671b477c330087ad5d45c9e7f4b1981084b1927dd2c9cf6e8ea53b7dfc80f89a4bf2e1a98f566b5ad35116c2237ebbed433b5
- SSDEEP
  
  3072:eeTJLbPtnRkYHyLNU1Ou+oukzEWBkOuRGK:7dLbHMUdukYpjcK
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan