smokeloader | 6c74dda288515035f95a6383a1172ffd00880e2a77064d2ea877056abd1210cf | Triage

Sharing

General

Target

d1a54d916393dc37a8733933c00f3d46
Size

131KB
Sample

241108-zhmb9aymbx
MD5

d1a54d916393dc37a8733933c00f3d46
SHA1

56cd4366ac3cd8d0f7e9eb22627317de4e0ab042
SHA256

6c74dda288515035f95a6383a1172ffd00880e2a77064d2ea877056abd1210cf
SHA512

19e9f3b95df4a43e6ed86c7e89f7c8e98778dac4890fa777ec1636762c94cd35f6ea61c8fa1a83ea61fc0f587067079b3ca34935cc6395b2475d514916014430
SSDEEP

3072:oGmUff5J5xdybRzn9X+5nCub+BCN6Zpn7i+AxhYUHg28QSJ:oNUff5J0b9n9eWHm+SHg28v

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  5ffbdeb1e10fbcfa26c1eb4c1b9d1d91265572a816407629edf724b77effe83d
- Size
  
  183KB
- MD5
  
  ab4963ef7b8ab8dd416d2f6f9338b5b3
- SHA1
  
  3470a306441c6fca91274090a2183a3d7957d12c
- SHA256
  
  5ffbdeb1e10fbcfa26c1eb4c1b9d1d91265572a816407629edf724b77effe83d
- SHA512
  
  e93f8067292f58ed03dc8da0ff7a56f98bb90eedd154e116ca2cb99187c8c502d6cd190a9113c2cd77f5292400154be21cbbe9d2f8667db1327b47c51278e0b0
- SSDEEP
  
  3072:hL76JiNs+S4UPWuBb2jO+C5yvH0oGaHaAMVaHGcjOxsxkgaBChG:l76es+Szf2jOreTJ4VaB6Giga
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan