smokeloader | 96062a026eeeea1041e9a184fd0a96751256f1e35fac50c045d6dacedcd5d9f3 | Triage

Sharing

General

Target

96062a026eeeea1041e9a184fd0a96751256f1e35fac50c045d6dacedcd5d9f3
Size

216KB
Sample

241109-m1xjqawkhm
MD5

7a2af3979bf9ecb35c6412557df3f331
SHA1

27144fe545e307c40d7adba06e1a12b4f08fd5b7
SHA256

96062a026eeeea1041e9a184fd0a96751256f1e35fac50c045d6dacedcd5d9f3
SHA512

57c64cb578d1ba4f3f446a676d494024347f9a9369b159bcbdb19ca39e3f393f414feb0b23a91958b8e9407301f7f92695d4e1c62323df8db1dabe55038fe57c
SSDEEP

6144:PeH9Afs9PjR1N4HGWeei6eI141ga32HBk7yXt/xea:Par9PjR1N4HGWeeia141g/hBxea

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  136f6b3a54fcaec60da9f8b63109abf48fc8387605ae86739595292345d72d5b.exe
- Size
  
  326KB
- MD5
  
  21bd9df0027d0a05b5baf39ee0a7f3a0
- SHA1
  
  053a20ad47278a72203bf76efcf38e1d61f9834c
- SHA256
  
  136f6b3a54fcaec60da9f8b63109abf48fc8387605ae86739595292345d72d5b
- SHA512
  
  4dcf10c9220ae756491bd5163a97d5ef69947cd36be9061c3f9b3e9c7cdb5803c78f33c25e7272f37beb8ee3ebc5ca6e3b97b77da8d454fe94057965098459c5
- SSDEEP
  
  6144:KkpLTOj062aBb6tvH6B2aP4vYsOPZElnyHSbX26WY:KkpujH2Cb6tvagaAlOkT72X
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan