smokeloader | 4eb55145015f7623059bc6e46401eac9c96d81146efc1c9f263d8280485c5e86 | Triage

Sharing

General

Target

4eb55145015f7623059bc6e46401eac9c96d81146efc1c9f263d8280485c5e86
Size

216KB
Sample

241108-m74xda1err
MD5

e2aa8611ff12300ed35713bd5b396b2e
SHA1

21a61539cbd78c50ae43234657b0d7e6a6a81010
SHA256

4eb55145015f7623059bc6e46401eac9c96d81146efc1c9f263d8280485c5e86
SHA512

60528333a79e3f866c8dae602cf542022f9a46d8159a93c84f45bb38faf2ead5d7a92e014773a24d8ecb50bb98145ad27fbb739997b0d0d340058499cd068674
SSDEEP

6144:J3h8baSYLi3Ny1jg0qkqNVIpBt1y9siZrAUC68:8YLi3upBMru3

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  e6e31997eb7c4d11417eacc33fc9d1c3fe58345729c8a120ca29348ce45bd73e
- Size
  
  330KB
- MD5
  
  3c10dc9df5b42968e8bbe67387bc30a2
- SHA1
  
  eae93159c2eada20557e7bcef365cbfc6e25b471
- SHA256
  
  e6e31997eb7c4d11417eacc33fc9d1c3fe58345729c8a120ca29348ce45bd73e
- SHA512
  
  b0d345f5c4fdbfcd21898f7c7dcb4a7dbe98073b9e0f42469743052daad32a90450835eed508d8f64ce0fdc3179d9519e0e62f5349a06555c366971ced62ab70
- SSDEEP
  
  6144:ozNeBb2LSMHey7/bQAtoFmU46DGhIX3B00ZrrMC7Ce:oB1OMHeEjQqU46TxbRQEC
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan