smokeloader | 4907361444ae3384fbd1a8bd496741d7dc200d75e6e6b0ccf00061a83eac6b21 | Triage

Sharing

General

Target

4907361444ae3384fbd1a8bd496741d7dc200d75e6e6b0ccf00061a83eac6b21
Size

216KB
Sample

241109-gv6bsazaka
MD5

db1e3c30a973fe3f8daae674fa9e4a30
SHA1

daed952fff8ef8f33a6c8ce4cf046b87e21a17cd
SHA256

4907361444ae3384fbd1a8bd496741d7dc200d75e6e6b0ccf00061a83eac6b21
SHA512

63ddd063401e9f41c19414e50fa0f3b7363417e94960670357d7106539edef27ae50a45590d822f578573137a35607d945c577759e25ee2bf0c2a6e433bef24d
SSDEEP

3072:lMAwW1NXIQqG162/uV4xBRu2/ChLIjWkOs2NhUTt9a+Jt1tmdxJiEAVoiHFaXZnq:Nz1N7/6hV6CdIjW12tjadxgEAVoiwslV

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  9f2af1a4c1a32ce29e548fd6e62d0b7e377dc438750a0b3465bd8d05d9768f74.exe
- Size
  
  326KB
- MD5
  
  fa62cc2acb168c294bb4dac80ac27ce7
- SHA1
  
  7fbf2fd8498b2b84a71043f3216fbe97a2be1834
- SHA256
  
  9f2af1a4c1a32ce29e548fd6e62d0b7e377dc438750a0b3465bd8d05d9768f74
- SHA512
  
  f6aaee1cafd05950980b84d1890d46fc6f6a47c2dd4ace71b59551f5651987db681c34bd7d64cf3ca6317de6dfa06d18a35c923a55054666b77ffe0bfba685c7
- SSDEEP
  
  6144:AqJLNlrUbzCU87aFOpwwBqYKbnDQ9cuOPZElnyHSRY:AwRlruzrOK7YSE9zOkTR
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan