smokeloader | 902543a59a8e14d952e73913820d53ca9d1ae2b19481cf18083f90199298a15c | Triage

Sharing

General

Target

42a27d6f85819b1248912746c9048f48
Size

136KB
Sample

241109-m3y6bsslcy
MD5

42a27d6f85819b1248912746c9048f48
SHA1

934622585b08732e7c8f51ab546d9d66cdc6f2ea
SHA256

902543a59a8e14d952e73913820d53ca9d1ae2b19481cf18083f90199298a15c
SHA512

8b45a1e10038fbb6cb92947654142984aab93bf91b6ba16ddbab9b9df0f42b47d7b809ea447b41eebc0632fcd533664ff1d5b040b3bdf387c5edd3f57929d0ea
SSDEEP

3072:fXKmoQj+pj2ELeNcGDWu2CTtLcroUQurUXs96QMnYKtYkZ:fXLj+N2ELeOcmN6skJakZ

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  05ca5bba0650cf01767621ce6c00b06d1c8caafa6f754bd63bbdc9dcfbd3da15
- Size
  
  190KB
- MD5
  
  e1d7718b0127451bba5f4a7b68e95098
- SHA1
  
  0d3266a304a8758daa4590088e509bc1332c2552
- SHA256
  
  05ca5bba0650cf01767621ce6c00b06d1c8caafa6f754bd63bbdc9dcfbd3da15
- SHA512
  
  76c67aed76191736f9ed8e6316fad556a34aceaa27e76bbf9d67e55f8f9ad2b2f34bf5dd3fea3f0adcc0d67ee514be22981fd919f8cee3cfc76091ba4594be18
- SSDEEP
  
  3072:71bcuqFCquVkwFFkVfzzRC574cXYVX41qHC47Dxe4MQoeajF3sxkgaBChG:RcTAmw4z0l4cX04AiUde4MQsjF8iga
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan