smokeloader | 5abf30016ec233fbaaec7f42294741745344f88017e4783cc8a16b2d42ea6ae6 | Triage

Sharing

General

Target

5abf30016ec233fbaaec7f42294741745344f88017e4783cc8a16b2d42ea6ae6
Size

123KB
Sample

241109-28cxlsvalf
MD5

8838269a40c3504b960e22089cb04ce0
SHA1

9ef11098542f3308dc45d9ae0f02ce0cfe314ecd
SHA256

5abf30016ec233fbaaec7f42294741745344f88017e4783cc8a16b2d42ea6ae6
SHA512

bf9f0237e78788d3ba5f2319be16b1377d7cc1749f9114c76b9ede0d1e9d4e9a3af1014262b6c47ee6bfb1d09cfdac1b1a74cb23b0ab40f2b2507c687d834657
SSDEEP

3072:p+X+c9pKxTG1onA8p8AaS/OobmNB4Fvoik2syyH0VvaN68GI:UZL0KonA7domNBWW2sy9vafGI

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  file
- Size
  
  185KB
- MD5
  
  e940b4994ae4aeba0bebb40047bef21e
- SHA1
  
  5b08b1324a86a5689cc7080245606624eec77c4d
- SHA256
  
  28fa399c77300c2883af5b05b1b204822080ab4efc81f0c18d2c13da91b1540d
- SHA512
  
  c5fb8e10858556b396a20dfbd63253ee1140eed5aa7b440706331af7690de59597ef3c93865a4ddb9943420178aca0a350b1e4d96fc4f0a5a906e3d5d575238a
- SSDEEP
  
  3072:6FX3IVXqq4zbXHK5Qs58ApRm8OJvAAmXWz:0x/H+7De
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan