smokeloader | 72f18e386968b0ca48342858c75063e824088f4128fc43e473b2001e669b9b67 | Triage

Sharing

General

Target

f6722992a55c8d7ab60986725b0d07204b14c4a3
Size

158KB
Sample

241108-mf433a1cmk
MD5

c7b987a36262b72c27d1e3282186f235
SHA1

f6722992a55c8d7ab60986725b0d07204b14c4a3
SHA256

72f18e386968b0ca48342858c75063e824088f4128fc43e473b2001e669b9b67
SHA512

0435afccef0aa49495e59f313c46ca8beac735d3ef08ae643cfcc388954bc0e1559399f6189653d26235db8a16d525886882f424bf644d2c1981b9559030bd40
SSDEEP

3072:KiVt7zjL5SNzoVE3mkDz3P9eDB1RtS837OECvEAaCurPl0LT+5GsdGi+OZY81hVf:pz3YNUiNDz4l1+OaMAePlwKwAGiX281b

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  88d69c758f849c46b7123bfa762a99aec247de252cf7628e1242b55ac8d975e9
- Size
  
  286KB
- MD5
  
  6f873a57ca82793d949d826617bbec75
- SHA1
  
  46c9dfca444a7859887337a361f50c7d6adbaa6d
- SHA256
  
  88d69c758f849c46b7123bfa762a99aec247de252cf7628e1242b55ac8d975e9
- SHA512
  
  db8c567eab3dc5d16c95a0200d53816d76f9267d834d84ed49150990cc198622a9018c89cdf0fbc746ff5d42fb2a8d228ee6a875318fda901bf9e15989da5c30
- SSDEEP
  
  3072:UGzpKJUPvyLzrqKXD5jk3mFvYiOqy4faT7OECvEAaCurPg6aWO+c4NtltM/h3:uUPvyLzrqKXJQiOqyHaMAePg6KuLt
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan